2af92877bee5614c19751a40ed484e86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af92877bee5614c19751a40ed484e86
Size

24KB
MD5

2af92877bee5614c19751a40ed484e86
SHA1

bb5ce067dc702a7f4d48e5011a198645b78cc768
SHA256

8eaece8ac211eeb56bf16fef6a64beb33744be089a5a2ffbda9aede2a44abef2
SHA512

b3fae45cb69b3f9e1860903013a48add5b8b2021b387192d5fe4a82166a67701670fc87ed9b44f03cb1be3514bfe1864e22713485dc3fb5ebfe3e2abb013af6b
SSDEEP

384:PD/E2/G44oxy6hMA15jy1WSZzKlBMIPWSNHRbm7qS4bzuj1i0VKNMPwNw75l/jsK:xRU6hM8RyoszEBFnNHR47i0ZZ75hxy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2af92877bee5614c19751a40ed484e86
unpack001/out.upx

Files

2af92877bee5614c19751a40ed484e86
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE