77531d04e0321dab071cdee09f6b627c | Triage

Sharing

General

Target

77531d04e0321dab071cdee09f6b627c
Size

197KB
MD5

77531d04e0321dab071cdee09f6b627c
SHA1

be8f8df2461b94978da5a857035f5d06ae24ff34
SHA256

afe5ba473790a9b6e32c39e97963dcf1358baa40e8d60cfc7e043c1a9fe6b629
SHA512

17d8eb1f42c24ef97e54328ccbc68ad30258d96739e6187bf46a8b927cda699675349680dc39c7061411cbedd4f7a765705bf3de7c515406cccdd2dbfc0571bb
SSDEEP

3072:e5EXJvLdkOqTLf/cDmO/y8YDjAwwN8hh43xcYwdqbVpjh8JSL/vfwDv0s:pXJhkOqsiy7YDUws3aYwkb6JSLn6v0s

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
77531d04e0321dab071cdee09f6b627c
unpack001/out.upx

Files

77531d04e0321dab071cdee09f6b627c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ