ccee5adfb3d1498b45e3ef6caf5a76a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ccee5adfb3d1498b45e3ef6caf5a76a6
Size

72KB
MD5

ccee5adfb3d1498b45e3ef6caf5a76a6
SHA1

5d23ee22924cfb729a7d0e26b03e4e482da56872
SHA256

cf8b6d764d84cf59f090eb1e54b5c6e6485639b74b00054cde42d511c1f443d6
SHA512

e532b9a3b4b76c1a415a926382545e2c6622c438d09f7d237a8c533dc0df488ea192ded0f321784884147ea982b0f8da688066770c7ab63e0068c4c6f9c2eef5
SSDEEP

1536:SUHcpLJG+G2W9Qx14Qy1CoLPecFR+90LBeV6i4zotuJMI/HR6zxtX6V:SUCLQr944Qy8Tg3aezjPR4fX6

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
ccee5adfb3d1498b45e3ef6caf5a76a6
unpack001/out.upx

Files

ccee5adfb3d1498b45e3ef6caf5a76a6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ