4775319d8d3d8c396b5ee62ea5bc0872 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4775319d8d3d8c396b5ee62ea5bc0872
Size

88KB
MD5

4775319d8d3d8c396b5ee62ea5bc0872
SHA1

936b47fd87cac6236ce858c04f5eec2e8f113be1
SHA256

fd46f4828fc5241d35ac09163fc32863988e5d0adee12abc3f9aa0ae5ec4c273
SHA512

c65323d4553879409d8ad5fd2da18456ab0a8bf861465df23c8d4599c9452653d9cf4bff4436671a9e1614b579ec10924f50c0ddba1010f75aa5b1b4858fd955
SSDEEP

1536:ug47BmFV3sB4u1s6WWbRZX53tb7Pif7VZ6uAPss:uloFCB4uCxWNp538DVd

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
4775319d8d3d8c396b5ee62ea5bc0872
unpack001/out.upx

Files

4775319d8d3d8c396b5ee62ea5bc0872
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ