79912e9ffd5de57f4ac917b9f6f1ff20

General

Target

79912e9ffd5de57f4ac917b9f6f1ff20
Size

90KB
MD5

79912e9ffd5de57f4ac917b9f6f1ff20
SHA1

9f34702b4e13b269550675e03673f085962d0c8e
SHA256

46c21e7a9b801be4e3c73c18e21fb6e13b8e616ce52974ac54ae3d16ee579cad
SHA512

b8aa885f51ee34cd6d7d74edc9fcc5687ac838ab6c556bfb1bb58516e005b9ffee3f846d34771d48b8cbfd8f645b77431909b31f9c1d4302a766c44241b65379
SSDEEP

1536:PdH3eTdcP/oL0Vdp+V2fUzlr0b3MTjl43ScqAaG9HNnGBB2m8M473LBRaF//2lMc:PJ3bP/uqofx0b823ScqzG9HNiB2m8M41

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
79912e9ffd5de57f4ac917b9f6f1ff20
unpack001/out.upx

Files

79912e9ffd5de57f4ac917b9f6f1ff20
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

DATA
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CRT
Size: 29KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRT
Size: 2KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 220KB

UPX1 Size: 73KB - Virtual size: 76KB

.rsrc Size: 16KB - Virtual size: 16KB

Headers

DLL Characteristics

File Characteristics

Sections

DATA Size: 23KB - Virtual size: 64KB

.rdata Size: 10KB - Virtual size: 15KB

.data Size: 20KB - Virtual size: 49KB

CRT Size: 29KB - Virtual size: 56KB

CRT Size: 2KB - Virtual size: 65KB

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 15KB - Virtual size: 15KB

.reloc Size: 512B - Virtual size: 42B

UPX0
Size: - Virtual size: 220KB

UPX1
Size: 73KB - Virtual size: 76KB

.rsrc
Size: 16KB - Virtual size: 16KB

DATA
Size: 23KB - Virtual size: 64KB

.rdata
Size: 10KB - Virtual size: 15KB

.data
Size: 20KB - Virtual size: 49KB

CRT
Size: 29KB - Virtual size: 56KB

CRT
Size: 2KB - Virtual size: 65KB

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 15KB - Virtual size: 15KB

.reloc
Size: 512B - Virtual size: 42B