6fed759584be7e7651386bb25ee5a3bbe714df3e36bcf339dc063568e7b8362d

General

Target

6fed759584be7e7651386bb25ee5a3bbe714df3e36bcf339dc063568e7b8362d
Size

846KB
MD5

e72747ab80244b6801742fdfd61fdc27
SHA1

db3e92f661e162d20b85ff652705935047006a2c
SHA256

6fed759584be7e7651386bb25ee5a3bbe714df3e36bcf339dc063568e7b8362d
SHA512

6dbe4c0c29ec904ddce6ee570cab0b6b34d24d837ba9cbcfc6eeb686b3e292d7cfaa5b5b3a117caa0653492379cb756a3c1201f88a4a1af72b4cb08c17d3d040
SSDEEP

24576:RIs/olsbSYD+1I5HDnWaxnmdMhOjq9XLFFw3tuNqI4s:ZoNYD+AH7WyPOKvw9a

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
6fed759584be7e7651386bb25ee5a3bbe714df3e36bcf339dc063568e7b8362d
unpack001/out.upx

Files

6fed759584be7e7651386bb25ee5a3bbe714df3e36bcf339dc063568e7b8362d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 773KB - Virtual size: 776KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.4MB

UPX1 Size: 773KB - Virtual size: 776KB

.rsrc Size: 72KB - Virtual size: 72KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 270KB - Virtual size: 269KB

.data Size: 304KB - Virtual size: 333KB

.rsrc Size: 212KB - Virtual size: 212KB

.reloc Size: 165KB - Virtual size: 164KB

UPX0
Size: - Virtual size: 1.4MB

UPX1
Size: 773KB - Virtual size: 776KB

.rsrc
Size: 72KB - Virtual size: 72KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 270KB - Virtual size: 269KB

.data
Size: 304KB - Virtual size: 333KB

.rsrc
Size: 212KB - Virtual size: 212KB

.reloc
Size: 165KB - Virtual size: 164KB