VirusShare-00c1f4d05421d1f28d32739f0cbced3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VirusShare-00c1f4d05421d1f28d32739f0cbced3c
Size

79KB
MD5

00c1f4d05421d1f28d32739f0cbced3c
SHA1

4bb9b1dd47cbd15fa4d899557b486c210e281dc2
SHA256

7f3ebcfb6c9e08707f82e29920cb83889c96346806d31dcb9af903cbef96efcd
SHA512

18318569bbd9aada6c1174e57ddd7fa2d17bd09655d6ad5e036e335c0dfa5bc6a9baf4557af1dcb87d9e6b3b45793ce6eb44cce98cadaf8f386af127d8c21c99
SSDEEP

1536:+TlpdLwbhTZcoQ6ZFtyLwmP/6nsn6Xe3oiRxfuFTU2XP/Z2iN2RUGN9:cpdLATZxQOzmg/Xe4VXP/tN2qGX

Score

10^/10

upx

Malware Config

Signatures

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-00c1f4d05421d1f28d32739f0cbced3c
unpack001/out.upx

Files

VirusShare-00c1f4d05421d1f28d32739f0cbced3c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ