790d20ce8534c2eba2195e6f241e8559 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

790d20ce8534c2eba2195e6f241e8559
Size

47KB
MD5

790d20ce8534c2eba2195e6f241e8559
SHA1

df8b6eeb27a8887fb302e0b1648d1ab7a291bd6b
SHA256

0bfef8f1c1de83aac464332ecf5178a0953cf52576b7ea6cd1599b30132263a2
SHA512

b330913170d5b8b2c653694e9e6711966deeff76525cc378142c6a3576e693e031e46d7c99eed6d3d0f0b8ea71188adbd7ba78931e7dd62d78e9260e809ce3af
SSDEEP

768:q6Gd7kLV9Njh2hOomJTqEanRNTPO7GdUKxTtoaBOfU40lFoRxVk0r2libtQA574a:wOLVDjh/lhqjT2isacf/0OxVk064b2Ah

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
790d20ce8534c2eba2195e6f241e8559
unpack001/out.upx

Files

790d20ce8534c2eba2195e6f241e8559
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE