7ff34957e32349a93db0b7a9b2e67763 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ff34957e32349a93db0b7a9b2e67763
Size

22KB
MD5

7ff34957e32349a93db0b7a9b2e67763
SHA1

2e52566a3314cdb78cebebe6c9a1934d291a798b
SHA256

2a72e5a9e89f7a40d316a83800471bddf5d421c988cef992c56dbb7b47e431d0
SHA512

bc561ae4647eaa1ec5e8f19520d7d7cf66ff923083d6c99f22ee4918c26f284ca894827d3d7a16d4f4500a9e2f767617d61e301c25ed9ab6d488054cca2b4bc0
SSDEEP

384:SehKBkRAoWzksuaiK2A1VpY4kMcUNKDeS5o0LkaC8XfiJV:tIkR3WzkwimpKMcUN4eS20Aapa

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
7ff34957e32349a93db0b7a9b2e67763
unpack001/out.upx

Files

7ff34957e32349a93db0b7a9b2e67763
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ