17f3c0068a0e98e29dfdcffe72d7ec5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17f3c0068a0e98e29dfdcffe72d7ec5f
Size

20KB
MD5

17f3c0068a0e98e29dfdcffe72d7ec5f
SHA1

aa0e156cb06a0552d8ab7e70fdca8dbcce8a4f47
SHA256

774f83f7351ff0772b5d5fa6a624e25cf9f992d574e591e2344b523e211a2699
SHA512

bda807657bca906467b0cdca6badf33e2d2b9ecbbcd3e0cf42192cffba272f2e76f21425ec9d23d9ff461d6ad1d830bc3b0bea6462281b49f412dd65ef9079de
SSDEEP

384:sG6aEybMuJ3X6wwZ0s+d4ch4BpkTbcbhbQTzFLvQl8GFtRkfv:96aFbMiHbsK41p/hbQzFLg97RY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
17f3c0068a0e98e29dfdcffe72d7ec5f
unpack001/out.upx

Files

17f3c0068a0e98e29dfdcffe72d7ec5f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ