1995482d0702022b4796106d4afd2774 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1995482d0702022b4796106d4afd2774
Size

61KB
MD5

1995482d0702022b4796106d4afd2774
SHA1

41df92501e565f10245c1c79758ef9c5aedb4936
SHA256

b8fa6c7f22da70abe49f6a69abe36503ec7e6d1b7bb33aa46a7f05d1732efbbd
SHA512

4a9e34e8f05a677f432674822301d9c694ac2fce7ce9d40ea4a3dc45c94215d8c8610b0f91621463609f30cd4adfe8515c153e2d8cf09bd2a010150f6b3942e6
SSDEEP

768:5GL8U6mOXq8X98zIyUWqPqfcqkgrQq5lagn1dXSVMNhN3oO+2c95LjPixRuAmV:44UWJN88XM3EwlpXSVMzN322cDLAul

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1995482d0702022b4796106d4afd2774
unpack001/out.upx

Files

1995482d0702022b4796106d4afd2774
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE