f961316435ebabd76b046296195c6cc40e7bbb3ef39c8867465a081e25b7fc69 | Triage

Sharing

General

Target

f961316435ebabd76b046296195c6cc40e7bbb3ef39c8867465a081e25b7fc69
Size

539KB
MD5

5b015cf0f3e16438c1ba746ca15588bb
SHA1

2e18520d6f53be4056197888fa85b6bfad92b7b9
SHA256

f961316435ebabd76b046296195c6cc40e7bbb3ef39c8867465a081e25b7fc69
SHA512

6f1b8b1f4cf10eec6c266c9a0264e281cbcc3e4dfced38aea4bd163b530771785249dd851e9dd8ae0848224cc140abae05cc6411feaa563ba53222c097ba7ca2
SSDEEP

12288:thymnwJFPNdgBAEHApqePJN1AmLM7uVq9sSBSH:tUmwrl2Ao7sJNlM7ymsSB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f961316435ebabd76b046296195c6cc40e7bbb3ef39c8867465a081e25b7fc69
unpack001/out.upx

Files

f961316435ebabd76b046296195c6cc40e7bbb3ef39c8867465a081e25b7fc69
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 760KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 529KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ