1cc62a67476c6c4a5b21439bf24104ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cc62a67476c6c4a5b21439bf24104ea
Size

8KB
MD5

1cc62a67476c6c4a5b21439bf24104ea
SHA1

f6ad21ac04647ab684a98651cee1b3dfb3660f57
SHA256

a8226a43856b01ce428072c7fd870d0196f39e5b66f1702ee3394f5f84ade029
SHA512

7c77bf1ead83e0f7554fc8e859424c6a72d86a803aadf818841da4d2212157e61407b42009c043090a4942808aa8b90827f2431021b729bc0dd31751643afec2
SSDEEP

96:/lxnij03aeVpapuxIdn/00zoBQHrdSjG3HrtNYeFKPRsEEbr6FNpgUOQ3cP2jGKl:/TUL7n/Zs4RSojKRsHr6V8QGJqr

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1cc62a67476c6c4a5b21439bf24104ea
unpack001/out.upx

Files

1cc62a67476c6c4a5b21439bf24104ea
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ