26e7abaa27e1ca2342939a7be95c17fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e7abaa27e1ca2342939a7be95c17fd
Size

134KB
MD5

26e7abaa27e1ca2342939a7be95c17fd
SHA1

f898ba51754f90568b415354103237db3017392e
SHA256

723bb150e7b210e3aa75390069c2a7ea3b282a83d55f50e01e95654c6c5db1c1
SHA512

023db880c0ac362a70fb37c4a130174ad07ee368d17fd8a6918fd432889277c4fad9b86144d9528f2c0fe8edc3628503add1738e80c70627419c6b7dc63e16a9
SSDEEP

3072:X5bBGLEZ4pSA/WuYwfapCIGYxIeYlfWYhj71tDX1k3+E:JbBBaWuYwfWCRYxWlfWYJ7DFVE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
26e7abaa27e1ca2342939a7be95c17fd
unpack001/out.upx

Files

26e7abaa27e1ca2342939a7be95c17fd
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE