cd5d69b85d8a13e07162f1b2fbce6a7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cd5d69b85d8a13e07162f1b2fbce6a7e
Size

21KB
MD5

cd5d69b85d8a13e07162f1b2fbce6a7e
SHA1

e921913f2509f4a9e4ff3d39abdec6f14ef5535f
SHA256

79ce4fa370e02884abf309b572356a2afc8d963328a3075272430149c947dc19
SHA512

965bcf016cf3610b3344ae536384942e721cfb7a049d88fe26af9d0b9c3634ece182c949b1ebbf2dba1466166abcdae1f9f3a9d9c94c586801ae28a413b71b4d
SSDEEP

384:EpG6avQVxRMM25s6QG0TJ4ZeeW25JzF3TnQ/Uw/qZ8qswChuD/jf:96aoVbMV5D0tMRJz+J/RICo7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
cd5d69b85d8a13e07162f1b2fbce6a7e
unpack001/out.upx

Files

cd5d69b85d8a13e07162f1b2fbce6a7e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ