741a8ec734443a1a2b0a7e96d8a00441 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

741a8ec734443a1a2b0a7e96d8a00441
Size

33KB
MD5

741a8ec734443a1a2b0a7e96d8a00441
SHA1

4f7620513a8514ecebddbbc55fdf4f21e6e1ae22
SHA256

78655090c1603e13bc9d5f0a721a5bde3dec6c118a7c79ef78042c0b34d9038d
SHA512

c74992c38bffc845e08f79df221ecb0bd6034a4e2875422e5c21e9fccaf2012e931026d2ddd4bcd89f22b061c78335e16b5884049321eeacb2f417b2e59710d2
SSDEEP

768:L2MfgdS+qBs4JY0xOcU1jZgtpj6XFJvYktVCtSkP:jfgdSze6/Y1jZgpj6XFJgK2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
741a8ec734443a1a2b0a7e96d8a00441
unpack001/out.upx

Files

741a8ec734443a1a2b0a7e96d8a00441
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ