aaab9265718dfec7b0164c00285456cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaab9265718dfec7b0164c00285456cf
Size

65KB
MD5

aaab9265718dfec7b0164c00285456cf
SHA1

6db3255b019f6c0e41f59ec5ee1969f0358944cb
SHA256

d58ac76ef6f1669a538638c8b8348b854e59bb963001c662c3b65ea12f4a9c6c
SHA512

5de4df41f745148eadd5c8aac27a889bc38ceb1f06b2c6ade5460b655318c5d35cbc742f1bfd4ea026e6f1fbae4a3f886de2d57e55cdf4451355cd71b0b196ab
SSDEEP

768:C08nKp6jowZ4/HQjnI0KafACW/E927YaxNNILyA+ZFMxLh5vo22Oq+6R3RAadXDz:C0qtObHCJgDdifwe36zAqXDjX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
aaab9265718dfec7b0164c00285456cf
unpack001/out.upx

Files

aaab9265718dfec7b0164c00285456cf
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ