c459dfaa3ee047ca02923f09a658fb9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c459dfaa3ee047ca02923f09a658fb9d
Size

304KB
MD5

c459dfaa3ee047ca02923f09a658fb9d
SHA1

8ef775c9c1d429aadd27a8812f293a69b22cb4eb
SHA256

c84c09a0cb167ec71b79eb3d8ac57dbc4d7d4fc7349cc7de44e5ef9949ee4a39
SHA512

2a5ce816928c27e086226d3b7bdc05fa9b3d899f45cb4b8cc0a8e6f6ff1b5474fb4453c24d3ca7be08f97e481d3dd8f74a189463c532ef6cb05e8c4c218a9f99
SSDEEP

6144:Yevs+KVC/kpF4SDzXnpouQza4eYD1lAt7aJ6ku+evG2ynvbqIeQl:9EjZpXnpNt4ee1Ot7abu+eEbWQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
c459dfaa3ee047ca02923f09a658fb9d
unpack001/out.upx

Files

c459dfaa3ee047ca02923f09a658fb9d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 303KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE