456d6a6f6e3d53cbd3ec6f1c07104616 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

456d6a6f6e3d53cbd3ec6f1c07104616
Size

9KB
MD5

456d6a6f6e3d53cbd3ec6f1c07104616
SHA1

c7951458518823a12be4fc946182e4c88416481e
SHA256

e564ff9185f9c5b68105c2621f98b065e4b850946358fa6b3a972f4c42dda85d
SHA512

f0c67b94e4931d5c77e19a7d85289c58c3fda434b2486bf5838f91d3304cf1e09084831e7fc57f22311cb452a0e61359437d8e11feb55d888c7fd8caa8dd8cb6
SSDEEP

192:ECXTkXj3T2BcxAca4R2heo4YHY5RENmZXhqzx9:EiQXbwcxAFheJY4ZQz7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
456d6a6f6e3d53cbd3ec6f1c07104616
unpack001/out.upx

Files

456d6a6f6e3d53cbd3ec6f1c07104616
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ