c282680f62ccbb84994b3a8a78df1dca | Triage

Sharing

General

Target

c282680f62ccbb84994b3a8a78df1dca
Size

17KB
MD5

c282680f62ccbb84994b3a8a78df1dca
SHA1

3c0a3e289a99ed46cb1ee8025a2c1552d35d4be9
SHA256

2f6ce800e9301590e845cd9c3654c9c5aae57f6c686946ba8e2df449deb33066
SHA512

0426b6a1fabcb141bfdd555445915f8f561ea7c602792ed83a9bdde69cbdc00e3107fa29b0e3540774688b976d98dc6831e3a26840f409f986be6e7d58b23dc7
SSDEEP

384:xxGRbE320PJc+JOsmI7tqf4N3t7tye2EymYg6864/:xxqQ3RRRmI7tqgN3t7P2EJy8h

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
c282680f62ccbb84994b3a8a78df1dca
unpack001/out.upx

Files

c282680f62ccbb84994b3a8a78df1dca
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE