d6490fac2737ced5c3b62a288c391a31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6490fac2737ced5c3b62a288c391a31
Size

83KB
MD5

d6490fac2737ced5c3b62a288c391a31
SHA1

1eec6e9b4a39b5d70ff2db08ceff86ac51fe4450
SHA256

f92d85eec0424b7b9c501f83a736bf67c17fdd650bd854ddc2484f466b6e1a6a
SHA512

63dda1d596338c728c30fadc56706260e7d54bc4a63637c708113b446780fb7971991ed90a7aed5225419e8c9b1567975018b0eafa032ce9191c03a4c5f3ca14
SSDEEP

1536:AtIUVKjY37/3/DCM1kEF4tnIk25QNquGvchO7lwvjD8PNipY4vL:PUVpb32wkNnIk25TuOMcPh4D

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d6490fac2737ced5c3b62a288c391a31
unpack001/out.upx

Files

d6490fac2737ced5c3b62a288c391a31
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ