215343ad3c62f50813d15fd84c16ac50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

215343ad3c62f50813d15fd84c16ac50
Size

109KB
MD5

215343ad3c62f50813d15fd84c16ac50
SHA1

c2a7658fc8730fdbc1d538325754f16ab9dfcdd4
SHA256

dd29899888dab2531866cba91f575179d4588956575f467ceba3e7274a82dd8d
SHA512

59911929fc3fbfabf4efbe9c75bc97399e09d0efcac5027096afdaa49a144e577d19c4878ff06683185a7ac1af5ed1fa28829ddeba3a3087ab27afe561ef4bb2
SSDEEP

3072:JdLHJ7MMat14OWnUw/6BskaLqF8AHMy7:DLH9MMat+O4Uw/msE8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
215343ad3c62f50813d15fd84c16ac50
unpack001/out.upx

Files

215343ad3c62f50813d15fd84c16ac50
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ