7387a2ec8df931d45d68c3d8bdb8bbe1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7387a2ec8df931d45d68c3d8bdb8bbe1
Size

91KB
MD5

7387a2ec8df931d45d68c3d8bdb8bbe1
SHA1

949186e6bbe2c3ede31345c0922a817f98063301
SHA256

39140f78b888dcd385e3e00ed511a695c79909e4a02eb2a0bbe10707e5e8c3fb
SHA512

7fc06dc9d0cf5579b1fec7dbfb2c262d6280031e3328780e1d43b84adeff292c455971a77864a5f35415b56e50c3a4fc1db003e682da35d40355e5d6c2417b1c
SSDEEP

1536:/3lBJNplcfNKbD4d0x96hWclkBrVZlluwEfYY224y2SCw4fdOrJLAEYgPRV0M5wh:/9Nkf4826hWSkBrVZKwwY04ysnUJLYgQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7387a2ec8df931d45d68c3d8bdb8bbe1
unpack001/out.upx

Files

7387a2ec8df931d45d68c3d8bdb8bbe1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ