c5b7ab0dd3aae609e9adcb287e805c36 | Triage

Sharing

General

Target

c5b7ab0dd3aae609e9adcb287e805c36
Size

48KB
MD5

c5b7ab0dd3aae609e9adcb287e805c36
SHA1

37eb4dbafdaac8bbf3ce8623bc1c5fc1863a4eac
SHA256

e3cd8408a42c1397ac8c077db72d4d4dbb336fa779c460986c131e83d05cec56
SHA512

ad8e406738f8a0d6e3d756ad584b7ee2525acd97250e4888a0eb85a58b6ee6a6aed2d3dbfe7704cbbd146b8590d414b9454746ac76d6b8f32207ca68b1673fbc
SSDEEP

768:Qdg6BhKSP78Tajniv5z/swqMTo6RowKdWD8k1abyqZz3adGD58LeeU4iiPQsttUW:CfKuwGr85zE3rmD71qyqZrgGNWee5iL8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
c5b7ab0dd3aae609e9adcb287e805c36
unpack001/out.upx

Files

c5b7ab0dd3aae609e9adcb287e805c36
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ