9c01059147038f29328d1dcb2b696091 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c01059147038f29328d1dcb2b696091
Size

67KB
MD5

9c01059147038f29328d1dcb2b696091
SHA1

2602c0a72e63a167fd0db3b7699cde959758b123
SHA256

6ae2b10c0be93d6d19ab8cca02037f50c67c87b4caf8ebf6b3630cd4e773f960
SHA512

faec25cbb0418ba246a3a01744c36d1ce41cf4a3cefac1241faf52f87cad43f6d80eca37f4774637586d86e2309e2255eff9bf1af5243b2e2d141de21f491c26
SSDEEP

768:nSK0B93LL9TV8c5POgVD2t0eofrwHbozj1ByBGoNUROfFRXFNZdkkOZAWwRjXPf3:S/B97LT/PEiTM4ywoNxZt

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
9c01059147038f29328d1dcb2b696091
unpack001/out.upx

Files

9c01059147038f29328d1dcb2b696091
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ