8b05e8873fc1f2190eff2ff4a0d2b363

General

Target

8b05e8873fc1f2190eff2ff4a0d2b363
Size

930KB
MD5

8b05e8873fc1f2190eff2ff4a0d2b363
SHA1

558d9e3363197c842eea53ae0fddd8335d8d3600
SHA256

050bb50a18fc0f02587c635b3a5a165ec6eb56f14722ff1b00ebff5b6e26f11f
SHA512

7b70f8da68f9d6e206d0382ad31f46ab778ea3d54e605cd5f416d57c83b68ff9538d97dad29e9695de29dd5b6b2fcc85887706495c7b710c06b4073c4c63e4d8
SSDEEP

24576:RG0aeB8tNXF8fJ31YC3Csx+Szre0zh5Di7Ui5kUMBlfX:RPae7fJORYrbzbBiLslf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
8b05e8873fc1f2190eff2ff4a0d2b363
unpack001/out.upx

Files

8b05e8873fc1f2190eff2ff4a0d2b363
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 640KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.4MB

UPX1 Size: 640KB - Virtual size: 644KB

.rsrc Size: 265KB - Virtual size: 268KB

Headers

File Characteristics

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.itext Size: 5KB - Virtual size: 5KB

.data Size: 31KB - Virtual size: 30KB

.bss Size: - Virtual size: 26KB

.idata Size: 13KB - Virtual size: 13KB

.tls Size: - Virtual size: 60B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 78KB - Virtual size: 77KB

.rsrc Size: 698KB - Virtual size: 698KB

UPX0
Size: - Virtual size: 1.4MB

UPX1
Size: 640KB - Virtual size: 644KB

.rsrc
Size: 265KB - Virtual size: 268KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.itext
Size: 5KB - Virtual size: 5KB

.data
Size: 31KB - Virtual size: 30KB

.bss
Size: - Virtual size: 26KB

.idata
Size: 13KB - Virtual size: 13KB

.tls
Size: - Virtual size: 60B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 78KB - Virtual size: 77KB

.rsrc
Size: 698KB - Virtual size: 698KB