50360c4aa4b91a1333fe7f22ac563725 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50360c4aa4b91a1333fe7f22ac563725
Size

67KB
MD5

50360c4aa4b91a1333fe7f22ac563725
SHA1

fbfa9bd6a1bca64152d30b75e58c5847b472a9d2
SHA256

5058ff62a0d7787cde61ecab26df14de159c6fa7f3d7d0bddc9a03c7487e54a9
SHA512

6abaa7b511bfc2c1a684ed33d3588b2d17c8e0bd0f229602d994d55ffbb07aaf89f5a578c92851348112cb1225a3fc2ae75fd13b1a676d3d88f566d3ab60a2aa
SSDEEP

1536:8tDWMaBMhJDpcJfZJkAK0PY1QpdfHM4I1g+grIUDPHMrb:2XimJD8LK11QpVsq+8IWM

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
50360c4aa4b91a1333fe7f22ac563725
unpack001/out.upx

Files

50360c4aa4b91a1333fe7f22ac563725
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 408KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 376KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ