39fcdad908fc5e9bb17f881ec53ffd0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39fcdad908fc5e9bb17f881ec53ffd0e
Size

115KB
MD5

39fcdad908fc5e9bb17f881ec53ffd0e
SHA1

d0e1a94d256dd335c67462fc9987850f6986e9cc
SHA256

7935300f905c15b4c6e36a90345802950980960040bcda4610c1864d33eb0a35
SHA512

a3dd92d65810c60e2849638db86849c01d4c780c9f59da94ce795d7d2e65c8d80b71111554bf68c7731d87d3f23b7081f5259335b367ad5b0556646a5a85a57a
SSDEEP

1536:S22B+Dx1GzGMlxPznMRrRkAG4WHMhCUmZlwE6GMY4F4Mcusq0Po0I8hsM0:S22B+vWyKWWZJwZ3mMcuco0Bhh0

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
39fcdad908fc5e9bb17f881ec53ffd0e
unpack001/out.upx

Files

39fcdad908fc5e9bb17f881ec53ffd0e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ