8c6fac4e919cdc758cd80dd9aaf11acf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c6fac4e919cdc758cd80dd9aaf11acf
Size

19KB
MD5

8c6fac4e919cdc758cd80dd9aaf11acf
SHA1

b6a9cd70b959928b237eb612b3868f49c4ee5e1e
SHA256

db20ef1d509d306b7dc4e21cc27326b703c8c199abc5a24b2b08e40721dade0b
SHA512

49773204779473fe24242db0b5bb428673d7cb8425ba91bb73193eb8d1b9888bbca5e3e7ec6e5490e0007854318026a8e5e52a2b90a85b0f864a60e989b05aa1
SSDEEP

384:7X9uxz5m9p1QZFeMpoMX6eiM4/dRAnnD/Utizkr2lO:70R5Q7QZ4SJXgM4FRGDUtizX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
8c6fac4e919cdc758cd80dd9aaf11acf
unpack001/out.upx

Files

8c6fac4e919cdc758cd80dd9aaf11acf
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ