76bced56d2be114a17177149cfe5395e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76bced56d2be114a17177149cfe5395e
Size

84KB
MD5

76bced56d2be114a17177149cfe5395e
SHA1

0e14218aa57072138bd991f8417c6ac9856893f2
SHA256

dcd221fe5c0214dec4e78c3e729879c1be411d03aea95073961187a62964f528
SHA512

4edca32c2397a6e2864b9f7bd928309e9a7ce4d98dffc247b38b2035a0b1fd417c78af11d25364727e4f08f0a3d04b0dfc0a6c802b2228c9ad85566e2c9f7c2e
SSDEEP

1536:6Aaz9UL3RGqv1Nu+aYV2fx9I0mfoXEIDZAIZLcaEH4VTqE+DLYwEc5hN2lYuw+:63z9q3zu/JbQo7FAIiaEH44EKLTPvNG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
76bced56d2be114a17177149cfe5395e
unpack001/out.upx

Files

76bced56d2be114a17177149cfe5395e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ