73ca3baefa527a20a77693ddf0eef249 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73ca3baefa527a20a77693ddf0eef249
Size

90KB
MD5

73ca3baefa527a20a77693ddf0eef249
SHA1

ee0bf4ffd6a11150ccb427c8b3c018a38222e9bd
SHA256

dd80dcbcb1f0a69661185291c144139310df2681abd501fd8b9156567dfb3a1e
SHA512

7e4815fd153ada861a48a401c37af70e6926983c01d774c61e262eb4c022ec0472c6ce05b7970a24f6e3a29e2d6c043d611b08849962df831980c58fd8d8594c
SSDEEP

1536:Nb/AleO2mZnn2XvUM1AbkVnFgk1Q7D4YOnBkCR1ulyyOBwRmO8buyL9iaksGEea:9/YeUn2/fabQnFgk+/WB93ukyZmO8buX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
73ca3baefa527a20a77693ddf0eef249
unpack001/out.upx

Files

73ca3baefa527a20a77693ddf0eef249
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v-lizer
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE