31bcca3b774fa48f0bcb85d650fc45ac06e9e0c7d910def3beb42cc77259961d

General

Target

31bcca3b774fa48f0bcb85d650fc45ac06e9e0c7d910def3beb42cc77259961d
Size

480KB
MD5

1f5544ad55b15c6126027b6d9390ec10
SHA1

be4ff0ff9aa3432389b43793af2a8225d38a9bd6
SHA256

31bcca3b774fa48f0bcb85d650fc45ac06e9e0c7d910def3beb42cc77259961d
SHA512

2fcf180414a5f844d63bebf3f6a3b595f6d4b100494fa785371dbccbc5f1d90fc271b2f7c9890ab3ba1aa72c9de0f17d6b1a0892d446f8f7cd0970d33240f18c
SSDEEP

12288:qA+AUTpldpbKSb8l52Qyvj5yMUaSv/DLO4A37z3wa362UnNuI55JPB0b+g55:qA+AUTpldpbba5kv8MUaSzLO/3PwfNN+

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
31bcca3b774fa48f0bcb85d650fc45ac06e9e0c7d910def3beb42cc77259961d
unpack001/out.upx

Files

31bcca3b774fa48f0bcb85d650fc45ac06e9e0c7d910def3beb42cc77259961d
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 40KB

UPX1 Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 1024B - Virtual size: 904B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: - Virtual size: 4B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 512B - Virtual size: 166B

.htext Size: 16KB - Virtual size: 16KB

UPX0
Size: - Virtual size: 40KB

UPX1
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.text
Size: 1024B - Virtual size: 904B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: - Virtual size: 4B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 512B - Virtual size: 166B

.htext
Size: 16KB - Virtual size: 16KB