5c1fdf23e9278710872d918f8a5d9c28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c1fdf23e9278710872d918f8a5d9c28
Size

13KB
MD5

5c1fdf23e9278710872d918f8a5d9c28
SHA1

9a3a8d3c55abf02900475c9c024ac1aef430f94d
SHA256

1d9d26aa4bf31f50dda0386d0760ab4c5beea3f01fd2dc7e56202baf24687ee9
SHA512

07763a1bbaa599719150a898928276da74be360050c08e2b5e8bcabcf28f9af3759c53567c4599658a7a25f3790b4248a7db1880d964f73728d10f78b1cc299f
SSDEEP

192:/Tt+bfNi4j9aHe+wNR6sE5Mz7djtlf0rTor5z+zyPV/aCsZptR4T9iEJ:/T+aHtInE5MzRBBiMdzuyt/atpXEJ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
5c1fdf23e9278710872d918f8a5d9c28
unpack001/out.upx

Files

5c1fdf23e9278710872d918f8a5d9c28
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ