4c50a1330c7c5fef617ea42978b32f4c | Triage

Sharing

General

Target

4c50a1330c7c5fef617ea42978b32f4c
Size

88KB
MD5

4c50a1330c7c5fef617ea42978b32f4c
SHA1

cca69d4fa997097e4c32b0fc48607ed14b4bb2d4
SHA256

8d5b5b76e469e4d90364ef46125980323ce212753710237f375fcaa26995306b
SHA512

0718353583766cff52dc6bc65c727f567d461be6e035fc0f1af3577099bec0e123b2f16070a89360e364429e572398fe7be9cdc13bbd3e2a8a7a841d268c85b8
SSDEEP

1536:zlUDymoGJ89iqYsQ0I+syDEC/Hwv/G5JW8x2njyaxemyW544GZ+ALFP2zCTndL5s:5UDymoGJ899YIfy3opx2jNN4fZtuKdLO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
4c50a1330c7c5fef617ea42978b32f4c
unpack001/out.upx

Files

4c50a1330c7c5fef617ea42978b32f4c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE