7b9dbdcc5c8fdfbd9593f13f511656be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b9dbdcc5c8fdfbd9593f13f511656be
Size

24KB
MD5

7b9dbdcc5c8fdfbd9593f13f511656be
SHA1

6c3cac7a49ad121785a40b946244bafa963c7f12
SHA256

f000c4f7668c39e163b27b7daef1c7f5430f068b032249932cc006cb4b7cf78e
SHA512

ad6cfb2337967ddc5fc5ed85a35fa958f2fd9235cbce4b0b92aaf04301a3cd174cd1136bc2658467278757dc4df3beaef59541ab311c208b404b83e115d10dc8
SSDEEP

768:tFLJLb2n3Rj5LUqyDqoMpSVcOJxmgou1Pm8H43j8dukb:HF8LUqy6pS5JxmgRYi4T8d

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7b9dbdcc5c8fdfbd9593f13f511656be
unpack001/out.upx

Files

7b9dbdcc5c8fdfbd9593f13f511656be
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ