136c23cf844ccc43fadd7a65bab49360 | Triage

Sharing

General

Target

136c23cf844ccc43fadd7a65bab49360
Size

59KB
MD5

136c23cf844ccc43fadd7a65bab49360
SHA1

008e20318f84ef7fb2e27cc4939172a832f8dfc9
SHA256

7fb5923a2c23a10b4ac71e6ff7cb8d650ae34a287377f0803ef1a92a95c58139
SHA512

12a4289c9d707926f1942ebededb00c97622c19c3c4267882ca8ac20f77a866341e84267e6d483d041e5ecb2ad792e57497686a9c807f07950447c34dbef2020
SSDEEP

1536:3sJzbdoXXtY9PT8AdzAqSmj5a2KgbYYG:3GzQirPAqSx2w

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
136c23cf844ccc43fadd7a65bab49360
unpack001/out.upx

Files

136c23cf844ccc43fadd7a65bab49360
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE