1832a6c4bad2067adcaea959177bf5d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1832a6c4bad2067adcaea959177bf5d5
Size

175KB
MD5

1832a6c4bad2067adcaea959177bf5d5
SHA1

c557a70bf339ac3ea363778ac7e123196a780415
SHA256

c29b72b2a8e1aaf0d5d29aa7d4edb0bd5274ac7e0bfc03cef63f5ca6b5a81fd1
SHA512

e6d826916d40cd545fb3efa74527017ded0e198bb769598d1075e2d389c3f04aa1f6e0bed8b6a28ded570d6ca1b74c98c8fe1c6c90962c562a146d242deefc0e
SSDEEP

3072:ye9HByb+TAPJWKaeAr++Q/sm0fWhbgIhFv+tP6lTfiv1TX5bIQIdHnavf:ye9HyRz+rmK3MFGtS9GlkQIdi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1832a6c4bad2067adcaea959177bf5d5
unpack001/out.upx

Files

1832a6c4bad2067adcaea959177bf5d5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 624KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ