9a74b6a2a3b91a51887c87cd973f5b49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a74b6a2a3b91a51887c87cd973f5b49
Size

91KB
MD5

9a74b6a2a3b91a51887c87cd973f5b49
SHA1

16272e3378465bd815e50b04c10bf6e4907ad369
SHA256

5179d7f1d3db3983d01db2428076afba23017d080fd1d39fa2998bf1cb222aa5
SHA512

4824e05b4e08616a567a370e6490fae2953048d58d987ca98580c7482050b5a7aa50a0c7315597b0975118b870f382730650a1c1037b3d4aa5866f125618efe3
SSDEEP

1536:MKD6JdNH1xqNEgZdMLVd30icG/urAKdmNjYl51xS56j8j0OdxjzyMMB5jXWD2:MKiqNBWVdD/ZOmFgzQoAj/xjzyM6mD2

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
9a74b6a2a3b91a51887c87cd973f5b49
unpack001/out.upx

Files

9a74b6a2a3b91a51887c87cd973f5b49
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 180KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE