64ea3b7650686a490c02318d2c3f1125aaed7b843db2a148e94223a077e0a897

General

Target

64ea3b7650686a490c02318d2c3f1125aaed7b843db2a148e94223a077e0a897
Size

4.5MB
MD5

05968bb0a55581448db9bf582a759ecf
SHA1

a6d58ca9e8241069ed5961561d87517b363c5f8f
SHA256

64ea3b7650686a490c02318d2c3f1125aaed7b843db2a148e94223a077e0a897
SHA512

f860ec9a64ebef34e239636dec3f5de5bfaaf88656f45b1b011374e0e062d692631e8e9e3a1f1170fd891ddb4575ad19c240a9c408f7cc064493fa233f41439c
SSDEEP

98304:yvgOMr3T0okOBg6Xm7tdZzEEokqGJcUtRj2W+3F4ucYW:yvg7DRk/6mBdxnoZ0BRz+3FNc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
64ea3b7650686a490c02318d2c3f1125aaed7b843db2a148e94223a077e0a897
unpack001/out.upx

Files

64ea3b7650686a490c02318d2c3f1125aaed7b843db2a148e94223a077e0a897
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 7.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 450KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 7.2MB

UPX1 Size: 4.5MB - Virtual size: 4.5MB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 7.1MB - Virtual size: 7.1MB

.data Size: 259KB - Virtual size: 450KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 192KB - Virtual size: 192KB

.symtab Size: 512B - Virtual size: 4B

.rsrc Size: 1024B - Virtual size: 832B

UPX0
Size: - Virtual size: 7.2MB

UPX1
Size: 4.5MB - Virtual size: 4.5MB

.rsrc
Size: 1024B - Virtual size: 4KB

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 7.1MB - Virtual size: 7.1MB

.data
Size: 259KB - Virtual size: 450KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 192KB - Virtual size: 192KB

.symtab
Size: 512B - Virtual size: 4B

.rsrc
Size: 1024B - Virtual size: 832B