8bf672897f00b9396cc16cdbd19f5057 | Triage

Sharing

General

Target

8bf672897f00b9396cc16cdbd19f5057
Size

263KB
MD5

8bf672897f00b9396cc16cdbd19f5057
SHA1

33c33b75901fd291f1e3985df1e6f073b5b624e9
SHA256

2771e62f3aa0d76c16ad0906596fff56295c3e0426030f73b52a53cad82ea1b5
SHA512

a6e2b74381dd8b91c72d14cece209d7510a395e6577f0fe956974957df435aa2cd88ce7b2768b1811be7f8aba0ad850251c3bedad4539a1dec070c5dd4ace0ef
SSDEEP

6144:cnRXyWYX7QNkapTJHmXtvB6vPxKkcTweJlF0vAu0gLhO:cn1+UOmTJHw8Hx3WFYR0gN

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
8bf672897f00b9396cc16cdbd19f5057
unpack001/out.upx

Files

8bf672897f00b9396cc16cdbd19f5057
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 448KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 258KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ