74b9ee2f27b98181c385b8b8d2129fdd | Triage

Sharing

General

Target

74b9ee2f27b98181c385b8b8d2129fdd
Size

63KB
MD5

74b9ee2f27b98181c385b8b8d2129fdd
SHA1

429d6305d31f61557c3f3e62e41b04ed3b7a781d
SHA256

8f99e8c66be4b59acffdeda7116a9fd5c3cfa25f713ceb44d6fa69ceddd45b6b
SHA512

0f58983a358274887d882c6846f3ac6426ae7b60f7cbcd57fff43078f15c65486333be70cbf8fe6a6a3f3effdfd694fa67436fbc1917924fc39fca10d4313880
SSDEEP

1536:eXdkDh6yYqJblOxrK9eghYRacQ/35TeZ2BhBNR5g0A7QbME1I:eX6Yxhzg2Rg/35TewBnjG0AQL1

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
74b9ee2f27b98181c385b8b8d2129fdd
unpack001/out.upx

Files

74b9ee2f27b98181c385b8b8d2129fdd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE