70c095572bf52aaf554e464ea071f290 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70c095572bf52aaf554e464ea071f290
Size

439KB
MD5

70c095572bf52aaf554e464ea071f290
SHA1

19df1192de5795c8de4813047380ac3a68c8be95
SHA256

9a1e9a25aa9b22b642fb1d690e1e9f4e20100bd8c2c215863876a4c1a0a9d25b
SHA512

0c03d27fd6f3f1392ef978a9f067d2e0f27cd6cc3b96ed87b61fa83964613943ff1d6cddcfcdb0d0f24b5686e98b2f42112a9eb751a26e0ce1cae744eb8217e4
SSDEEP

6144:oXtQWyPGd6Oe6ri13gusNszuvxUW4Ut9sweu7ISdw+Os9MzV0/1DH62sY8ObJFHV:sQJUNePGuseajDNPKyV8Od

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
70c095572bf52aaf554e464ea071f290
unpack001/out.upx

Files

70c095572bf52aaf554e464ea071f290
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 976KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 434KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ