cd243563d99955cc901bb641be754009 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd243563d99955cc901bb641be754009
Size

42KB
MD5

cd243563d99955cc901bb641be754009
SHA1

11d1b5144c1d356f024b88cb88036c2104859ad1
SHA256

49774c31c84a5db81c23f0338624be6bc325eeada49b19f834d47d5342744f24
SHA512

44b3079f6c9e8e4ecdfe4006fe427ece0e4187333063ecafe2ccf1f006c9f539c8479c8af6233bb74b6b46aa9ee63ed830dab31ede7995d8c9a73909b6845e7d
SSDEEP

768:yU8ZMc4HfBTsPGK15ke1ZjiOG8oJFATfY+pA5neuw5y9puc2SitlQsRv:y2RS15kerjiOnqFiTCguJ9hs

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
cd243563d99955cc901bb641be754009
unpack001/out.upx

Files

cd243563d99955cc901bb641be754009
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

��0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE