47ed26c6f9dac600c4ce5635f7e02b0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ed26c6f9dac600c4ce5635f7e02b0a
Size

14KB
MD5

47ed26c6f9dac600c4ce5635f7e02b0a
SHA1

7167dbd1a50b3213a4b7ef115b3597582c15a02e
SHA256

dfcef42e644f5081ffc233449f546b69fe38fe18ec3095436221b86c390df264
SHA512

b7da1ee5a1c968b6e7b1b2ee6b9c3979724b746b1a23ea7fc45b4e52e06063cf492b553c644515f7f6df01e807030c72f8cc29a6044d36ec23a1b4a66f9ecd79
SSDEEP

384:aH4XQisTPWdMyqd8Zqv9BB+0rhFDa4cC6Ia:aHZiGFyevfB+K7Da4cq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
47ed26c6f9dac600c4ce5635f7e02b0a
unpack001/out.upx

Files

47ed26c6f9dac600c4ce5635f7e02b0a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ