1cd0aad5bc3523a58ba3df49b946a510 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cd0aad5bc3523a58ba3df49b946a510
Size

23KB
MD5

1cd0aad5bc3523a58ba3df49b946a510
SHA1

d90d4381d62efe1ba9ed59b72cc92ee7b15427ef
SHA256

4539d1b8212b187a27948eacf166878cf185aa118e79bdad821dcb24cbb63a50
SHA512

49c1c0a45be02137c3b9db37edc38e4fe418893c1c6bb68ba27f8fd3b5b51b5a2dce10a227f0cf2a7435db5e1b87f0a7879d2c15a88fb0981e122d8bf899c04e
SSDEEP

384:27pfPZZMJwBRLdge0I35ytYHzah0bdByJSMpWF1frC2zgmdysRNDUaScsMsU4fNF:CFvBZdb35ytYWMRFprbzgohUbc6v

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
1cd0aad5bc3523a58ba3df49b946a510
unpack001/out.upx

Files

1cd0aad5bc3523a58ba3df49b946a510
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE