1858b62a7f5cf3f83ac754839ff6be72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1858b62a7f5cf3f83ac754839ff6be72
Size

11KB
MD5

1858b62a7f5cf3f83ac754839ff6be72
SHA1

29da5e3aa2241fe58cc6610ea69b29bbaa6b114b
SHA256

40dbacbcfaf2e3b0d76ab3d5edc9c2921cbb575e8e14e83912ecd7d14cfda0a3
SHA512

99677060f9b0eb912d9c123747dfd423dc4182bfb8afb51e26c3b55b8076d74a05460dc46645b40fca1cf2fb09763a7f460f938445f28eb29baa350e4d524b57
SSDEEP

192:rxJ0ai61lSuljPhJeZ727/o8SdjBkrZ6QGY8I5he:rxJ7lSuljPhgZy7/Aqd6QGYc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1858b62a7f5cf3f83ac754839ff6be72
unpack001/out.upx

Files

1858b62a7f5cf3f83ac754839ff6be72
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?KeyEvent@@YGJHIJ@Z

Sections

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ