ab28e72c1b1b6382364fa9a6ae1448dd | Triage

Sharing

General

Target

ab28e72c1b1b6382364fa9a6ae1448dd
Size

9KB
MD5

ab28e72c1b1b6382364fa9a6ae1448dd
SHA1

94f3d107f7d72f4482871e37071fcc61d6c7a73b
SHA256

63860a7ed46aff766656984b05953cf8aff727b569acb9b9594d0d20d8fd3262
SHA512

9d2b79f9963c55a665fc004902ae93f5e6edd24823b60dc539f8bccb9bc0cd3b61b6284061d1677ef08efb4d6102e3b72e1cff48be4271aaa1862b2d00dc298c
SSDEEP

96:jiZlhgCTGMBGzFvmsg8V1zpGxYZJ5U4BclT4OXxuJZ58w21qqoC0uWdLEaF:Opg1u6pmzOl5e0qwZ5TyPWdLEaF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ab28e72c1b1b6382364fa9a6ae1448dd
unpack001/out.upx

Files

ab28e72c1b1b6382364fa9a6ae1448dd
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ