463f9622ea4af0f06dfb9fd76302bfc1

General

Target

463f9622ea4af0f06dfb9fd76302bfc1
Size

692KB
MD5

463f9622ea4af0f06dfb9fd76302bfc1
SHA1

1c8d857851c6cf029a4c454d051144c2dc3337cb
SHA256

12b72e7908f3fdccdccb82b9185e8702e1a350cb55d5dcf4398ba426e4d53982
SHA512

2fbb0e0584037c986d1482f21d66f112db010efe374e2ce77abeb3b3a4edcbd86d206d405c14caeebc996d52b54297fa6e5e0a6a2522c2d2c8372008198893f4
SSDEEP

12288:BkbeDLECH/93MscepC+wLk5scQyBPv/SfGqke/EV1WAWY0qmx+Z0DGlOULdRKDWa:Bkbw/WWXQiPv/S2QO1E6ryCcULTKDWa

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
463f9622ea4af0f06dfb9fd76302bfc1
unpack001/out.upx

Files

463f9622ea4af0f06dfb9fd76302bfc1
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1004KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 520KB - Virtual size: 519KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 653KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1004KB

UPX1 Size: 351KB - Virtual size: 352KB

.rsrc Size: 340KB - Virtual size: 340KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 520KB - Virtual size: 519KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 11KB - Virtual size: 27KB

.rsrc Size: 653KB - Virtual size: 653KB

.reloc Size: 27KB - Virtual size: 26KB

UPX0
Size: - Virtual size: 1004KB

UPX1
Size: 351KB - Virtual size: 352KB

.rsrc
Size: 340KB - Virtual size: 340KB

.text
Size: 520KB - Virtual size: 519KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 11KB - Virtual size: 27KB

.rsrc
Size: 653KB - Virtual size: 653KB

.reloc
Size: 27KB - Virtual size: 26KB