dafb3fea798ff13bfd67b19df95296ff699b9dc49bd19e4265f2252a6f346575 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dafb3fea798ff13bfd67b19df95296ff699b9dc49bd19e4265f2252a6f346575
Size

33KB
MD5

0778baee4a0fd9bbab69b962bafe63da
SHA1

f1c0d5f7bb138bb5a20d939a1774b35eb763f2ac
SHA256

dafb3fea798ff13bfd67b19df95296ff699b9dc49bd19e4265f2252a6f346575
SHA512

5051355314787d512ad627c5e7f9249a3500f62069818b7cd451ebebf9e4bc11bce027675fac06ff8f96cee545dacaccda4aa6c49998f0abdc498eb4eaf8f319
SSDEEP

768:SCIqdH/k1ZVcT194jp4GfMzKxbaTlcazcQ6AOw:SNqaLV8a6GfMzK0Rc87

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
dafb3fea798ff13bfd67b19df95296ff699b9dc49bd19e4265f2252a6f346575
unpack001/out.upx

Files

dafb3fea798ff13bfd67b19df95296ff699b9dc49bd19e4265f2252a6f346575
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ