7de9aecde40ba4cd45cda106d6397c55 | Triage

Sharing

General

Target

7de9aecde40ba4cd45cda106d6397c55
Size

35KB
MD5

7de9aecde40ba4cd45cda106d6397c55
SHA1

bcca42e60f1f058566917bf921488090b22760ee
SHA256

eb06dae8c3a1852063dcc4d5d7ae29de3b246ecb2d7ce75b66e2aa38700ff978
SHA512

406ae1bb504fecca2b9d57a87494423d986e6c0c37fe0aa552841c58f7991ae8722a6f9f2bd7bffab6b48a8a4882afe2033d71aaa733e12a451f3a37e3ef8747
SSDEEP

384:Z6dKsFvt5WDU4TmFkWyjuh+oXBS9+ErHLskU9LgD2iWIWUzNCxhybSJVubdROn3J:4VeDTIRync9eL8y2JGQMHdUnLk5rgGQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7de9aecde40ba4cd45cda106d6397c55
unpack001/out.upx

Files

7de9aecde40ba4cd45cda106d6397c55
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE