bd520255606ab013ad5537a902e69767bd1c3d89e6b80c2a5815a3dae2d6d904 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd520255606ab013ad5537a902e69767bd1c3d89e6b80c2a5815a3dae2d6d904
Size

24KB
MD5

2b97b9bf96bc77c2dd8ad1545abfeec0
SHA1

4cf491ca32de0e0dea0cae3c4dbee6a63dd13a9a
SHA256

bd520255606ab013ad5537a902e69767bd1c3d89e6b80c2a5815a3dae2d6d904
SHA512

f3945b0eebb0d470da7570ecdad1749026f9ea1b88d4b0f1275db602677710c62ea3cdbadf6f332945139368eca2ce8c185fad59c77023192bca497a0f1da00d
SSDEEP

384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUcmNFLJl9p:SCIqdH/k1ZVcT194jp4tFdp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
bd520255606ab013ad5537a902e69767bd1c3d89e6b80c2a5815a3dae2d6d904
unpack001/out.upx

Files

bd520255606ab013ad5537a902e69767bd1c3d89e6b80c2a5815a3dae2d6d904
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ