7cf7599cf0bf399a65264f7dc2db3931 | Triage

Sharing

General

Target

7cf7599cf0bf399a65264f7dc2db3931
Size

135KB
MD5

7cf7599cf0bf399a65264f7dc2db3931
SHA1

2dbaed915a6eee0432b95a96060618f60c882312
SHA256

f527fa814f1cc45e5bf14e1c1299aab325fde156461eaa5a7f4aa621687bedf6
SHA512

520830f73c4f88b3205843f13f485a32c463a7d60ce36ac6541df13836311451764e528ebd0041cd9c400c151034feb85882b21083f4309ed154e7547cb86a2e
SSDEEP

1536:xVZD7i4eDrhAu8pI59jF1rIZaQBppdqh4j98veZQ8VCLXvxy5Wx28JvYDwFiCzpU:xfD7iXDdAu3DjFN0+h8ys8ODwF8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7cf7599cf0bf399a65264f7dc2db3931
unpack001/out.upx

Files

7cf7599cf0bf399a65264f7dc2db3931
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ