2315e01a52f3ffa5810ce46260803a29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2315e01a52f3ffa5810ce46260803a29
Size

7KB
MD5

2315e01a52f3ffa5810ce46260803a29
SHA1

5ac646ab837fe6c87d205589a0c10d34893da16a
SHA256

5aaa14bdc810d57c124e8afbab6ae128cdfe3831368508b5a5c349d7239b0bad
SHA512

5ad8bf6ed702cc5d00858cc480daf3d7550a9851fbdcd67751885c57faf410da474c3ded46823a0878367cccfaf56a81a6187fd0952655674d1a356cb950c48c
SSDEEP

96:3WjaQKPqL4NDHHQl0d6dE8umSCG5OyeyT7w8L34yb+uVxVeDUEeDhYo:OBcc0d6dZlSCJyes4ybPVeDUEeD9

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2315e01a52f3ffa5810ce46260803a29
unpack001/out.upx

Files

2315e01a52f3ffa5810ce46260803a29
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE