df75a301630e68f2ae58d77f3899eaf8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df75a301630e68f2ae58d77f3899eaf8
Size

8KB
MD5

df75a301630e68f2ae58d77f3899eaf8
SHA1

7c1a3b765821d61794180d1461df59d4cd91dab1
SHA256

1abb0d3c8dba525db8f860223390e1e5f6cd65740876b2e82369bc4ab9ebb113
SHA512

ea93e1065cc9d5ab9bbeec681a9230c0d4ed6cc85b9f95e993eb885ac02c2613c0815f0782582608bf83cb74ef4d3c8aec490729b9fcd45fa5a5581f6804d6b5
SSDEEP

96:2QRop61EQlhNJZ5n0btfqBgSP1o6A+PzXhIuxXc/A9rXeHHuvwCSswir:2x61vv5E4gStowpXVJKHuoCHpr

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
df75a301630e68f2ae58d77f3899eaf8
unpack001/out.upx

Files

df75a301630e68f2ae58d77f3899eaf8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ