73e6231573e313cc24fb36323011634d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73e6231573e313cc24fb36323011634d
Size

59KB
MD5

73e6231573e313cc24fb36323011634d
SHA1

ebbffdc9162f504ca9fc99aa650a668f00f62df7
SHA256

2f876aa83b1624dc54972152bb92c3d7cad565d392958a7c8a15669e4f1c2d99
SHA512

65e1afabe75f53cc368ce94d125b76205cfd9c161295366c3bd62c4b2888ad565f4458ea275940d8a9103faeb6a18079e4a37a56feee9e3d94711c0b74422d08
SSDEEP

768:oNrrb6vAiKcLtoyF+bdCzGu6gAbMzCM+CRNMlsKfZ/CY1SiX3N/5+qhGTG0eOw:erb6vBFAdlbMzJ+sNMlX0Y1B3eBheO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
73e6231573e313cc24fb36323011634d
unpack001/out.upx

Files

73e6231573e313cc24fb36323011634d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE