7258fe884327444cc2182dd63caf0409 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7258fe884327444cc2182dd63caf0409
Size

61KB
MD5

7258fe884327444cc2182dd63caf0409
SHA1

587d07359a0bd914a18c2c4d45e5ec0dd3806718
SHA256

4c7def2d8ee2e96a1a5bd23c208c7824cd3b5006d4260153ab92d102269e6406
SHA512

4f4af6fc541d8dffc344801634db27f23b3197f06cad2bcf60abe8c6f4bc8f8309f0e21fc5fe503a2ca330182e7bd60b287f041cacb8e2b5698cdad4759abbdd
SSDEEP

768:V6K2Oa7LE9J7lPAwRKl7XEAltM2TeHJfcm7SGmHVXKAlBt5TfZnw5n4WQzTGfbgp:V6K2349NRKdBNYfcm7SasXTIQggLt

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7258fe884327444cc2182dd63caf0409
unpack001/out.upx

Files

7258fe884327444cc2182dd63caf0409
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ