bc9269ab4fd77dddf65ff2fb43a57bfc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9269ab4fd77dddf65ff2fb43a57bfc
Size

118KB
MD5

bc9269ab4fd77dddf65ff2fb43a57bfc
SHA1

9e7f1e24ad2630174e3bfca24fb90acfe24ea11a
SHA256

5f9651823f3c5f6e6db7d9574d6dd810ccfbf30cc42561ec9350bbccf93c9dea
SHA512

80e3f382ea08d511fe6b1481cd03bbd869e93a58a272907c79139e31cf873bdaa45db75fa3bf68f4a1d9f9d29d3dd855bf1ac2f6fab1ad063d3c951539aa90a7
SSDEEP

3072:iWH1NKf3p+yAqQoMnMdVoy/fQwIhLGBDrvdbBVo3KZ:HH1gf5+yAqQqXIBaDrFBqg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
bc9269ab4fd77dddf65ff2fb43a57bfc
unpack001/out.upx

Files

bc9269ab4fd77dddf65ff2fb43a57bfc
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ