a2661ee19eb4da20f25d6ef069d43ca5 | Triage

Sharing

General

Target

a2661ee19eb4da20f25d6ef069d43ca5
Size

198KB
MD5

a2661ee19eb4da20f25d6ef069d43ca5
SHA1

b3faf8c72ad9e6d032fa819481acb4523dca3158
SHA256

bd62645e2f9b956e86508fc4186882521edcaaaf6d2c24c55a0aa0ddc257e0b3
SHA512

0cc61c2713eeda969b911c917bf5682abbe856b504ad3234758ed0f35a098dc9a05ec9cab0b6bb393cc9f76111058ffede89c4f9b2bcbbc145eab89c8df94f6d
SSDEEP

3072:QqHVqteFbqfFrOagiGAYnoIXq0cDF9Fuauu9vwVwZrlHsk2U4+3EMuNv:QqHVFx2giGA50mF9l9vwSHHs5U4Drl

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
a2661ee19eb4da20f25d6ef069d43ca5
unpack001/out.upx

Files

a2661ee19eb4da20f25d6ef069d43ca5
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 190KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ