88fd1a219dd1a39dbc26f7483cf28054 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88fd1a219dd1a39dbc26f7483cf28054
Size

77KB
MD5

88fd1a219dd1a39dbc26f7483cf28054
SHA1

7e2958cdaa2e99664c87287f8834174bbb41c1b7
SHA256

db925a0ad456f68e5b14285edb5e9dc6937287891595a8c1e8a9c3c09aeab84c
SHA512

537311daa5388807aea50758c62c152ed4c7456b07223f7194d3bfc873d8cfea2e266caa0eee6e3d3d404f3f40fa29e7f32c92b16bfb86cc2ecd346d01f099a6
SSDEEP

1536:gOhGjRMJqBTnoA2rlnBqk/5vzJDDdNdL09C7tfJxVLWzNXD:gEJqWA2iovzJDjuC7BdWd

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
88fd1a219dd1a39dbc26f7483cf28054
unpack001/out.upx

Files

88fd1a219dd1a39dbc26f7483cf28054
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ