79f92808911af39169a763ced7b013f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79f92808911af39169a763ced7b013f5
Size

83KB
MD5

79f92808911af39169a763ced7b013f5
SHA1

d5246e0bf952e44ee6b44c492f5e4a0c4cc33716
SHA256

4412cc30749cece3771c1918e5689dc7faa9ad8d589c8e598ece0abecf887a1f
SHA512

cc46dd5be1794c4e31584444f2952f34fb1f1d543c04905d92b741a8c90962e29785d4a4d307c7e9cfc8cf5006b7131b5f2649e78eb481a72dd1523fff37504d
SSDEEP

1536:JBOhV9Eg5kTWiksvLkuoD5AMkEUU67eqtCZFKI/F9CgSGujd:PWV9b5KWikaLkuQ5QEZ67ztCZFv/F/uj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
79f92808911af39169a763ced7b013f5
unpack001/out.upx

Files

79f92808911af39169a763ced7b013f5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ