3a7b94cb0620d4ff63821266227b1b4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a7b94cb0620d4ff63821266227b1b4c
Size

391KB
MD5

3a7b94cb0620d4ff63821266227b1b4c
SHA1

f66b50c6b9333e201a2689125b751d8e57b0bb39
SHA256

227eb9658a4924ba9f8ec3db58d7ea5f4532ef286905af00e04df72df790aa4c
SHA512

b0feed714382eb8c76bd611da0639b6a90e67b97c1c5fbcb7e1e1cb5efaec56ecb8717dc6c0226f355fcc9eb0d25f5361bf558c6472f751056d725528f72949e
SSDEEP

6144:4bAbcp6KfPszoX8FNTkznKxNvvLk3YLxT+6EjG3pZMq3/uyk63mx3FqSb/TRUzl:aAQB8GiTkzKxBYoVq6EjG3p3Bk6A7Nq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3a7b94cb0620d4ff63821266227b1b4c
unpack001/out.upx

Files

3a7b94cb0620d4ff63821266227b1b4c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ