f8f0f07765f18642a3169936b5ef3c50d7995f8c0833d7e2350c124bcc587803

General

Target

f8f0f07765f18642a3169936b5ef3c50d7995f8c0833d7e2350c124bcc587803
Size

10.0MB
MD5

80f39688ac459add5b690b6a816df50c
SHA1

3e288196c48b2c43829012195fcfc254ae7ea9c2
SHA256

f8f0f07765f18642a3169936b5ef3c50d7995f8c0833d7e2350c124bcc587803
SHA512

33ab5ce3557e74e2791a3a8f1bb9e27acac5536dad5b977a3cb80c34743a631bfd2c9c383d0ea2a0c3fb7fac84a6d0dd579f5756aee114cc2cf910d0f0a3c269
SSDEEP

196608:UTkXAlOY+4/GVwHX6x3H2sH1/aov4Yrs9YVyLITT8fd:UTkXKBJ/Sw3GGs4QJs9YVyLInq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
f8f0f07765f18642a3169936b5ef3c50d7995f8c0833d7e2350c124bcc587803
unpack001/out.upx

Files

f8f0f07765f18642a3169936b5ef3c50d7995f8c0833d7e2350c124bcc587803
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 7.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 7.9MB

UPX1 Size: 5.5MB - Virtual size: 5.5MB

.rsrc Size: 2KB - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 8.9MB - Virtual size: 8.9MB

.rdata Size: 3.8MB - Virtual size: 3.8MB

.data Size: 113KB - Virtual size: 170KB

.qtmetad Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 13B

_RDATA Size: 1024B - Virtual size: 560B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 323KB - Virtual size: 323KB

UPX0
Size: - Virtual size: 7.9MB

UPX1
Size: 5.5MB - Virtual size: 5.5MB

.rsrc
Size: 2KB - Virtual size: 4KB

.text
Size: 8.9MB - Virtual size: 8.9MB

.rdata
Size: 3.8MB - Virtual size: 3.8MB

.data
Size: 113KB - Virtual size: 170KB

.qtmetad
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 13B

_RDATA
Size: 1024B - Virtual size: 560B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 323KB - Virtual size: 323KB