774dc8c9c4b2f260f7fb0dc30196a505 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

774dc8c9c4b2f260f7fb0dc30196a505
Size

76KB
MD5

774dc8c9c4b2f260f7fb0dc30196a505
SHA1

8086946c27eae0fcfa032167981c9d862cee1f83
SHA256

1ef54f235b4f02053bd07b83019d026e43892444b7a67d2406e9394a248a2e6d
SHA512

0e83fc2a8808264f6522ac5734f4772c0a03ef6c18f707363564667123198f7682e814fe376dd480561e112b712bdf90aee874a8c886c9b22db9a583eeba5a2a
SSDEEP

1536:gqmhO/H0pqQOShWln898TWLRWM3IJHD0ueSZqj5O+Pxozq6iDm4:gXsiAvy8yLIMCD0ua5Okoem4

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
774dc8c9c4b2f260f7fb0dc30196a505
unpack001/out.upx

Files

774dc8c9c4b2f260f7fb0dc30196a505
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ