3697150373ae72383b4cd34fef6691b7fd6e2c9a6aa0070bba125b7766277d9b

General

Target

3697150373ae72383b4cd34fef6691b7fd6e2c9a6aa0070bba125b7766277d9b
Size

6.0MB
MD5

7c02fb4afc606f99b898c8958e829ee7
SHA1

13caad3adf9b7983691be45f781030537722d805
SHA256

3697150373ae72383b4cd34fef6691b7fd6e2c9a6aa0070bba125b7766277d9b
SHA512

c93ef4a36221e0f9698706ae8f64f89f0f4fd058691d79b1d55e7c68e684c882c52b5b7bb8c59725bd4c7696c99e1b50bfd7ad68fdd38f7f7a183c22ef731ccc
SSDEEP

98304:QfyYNLH2Iy8ADaC/CXmB8MI/xs7HplCFUXBh9J9U9qFpC/WplhlXaj3LRqFZn2BR:Qt3VoZ/CXK8bSyEz02OHlXvHB4

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
3697150373ae72383b4cd34fef6691b7fd6e2c9a6aa0070bba125b7766277d9b
unpack001/out.upx

Files

3697150373ae72383b4cd34fef6691b7fd6e2c9a6aa0070bba125b7766277d9b
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 5.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x64 arch:x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 495KB - Virtual size: 495KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 5.8MB

UPX1 Size: 5.7MB - Virtual size: 5.7MB

.rsrc Size: 211KB - Virtual size: 212KB

Headers

File Characteristics

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.data Size: 224KB - Virtual size: 223KB

.rdata Size: 6.2MB - Virtual size: 6.2MB

.pdata Size: 279KB - Virtual size: 278KB

.bss Size: - Virtual size: 29KB

.CRT Size: 512B - Virtual size: 24B

.idata Size: 17KB - Virtual size: 16KB

.rsrc Size: 495KB - Virtual size: 495KB

UPX0
Size: - Virtual size: 5.8MB

UPX1
Size: 5.7MB - Virtual size: 5.7MB

.rsrc
Size: 211KB - Virtual size: 212KB

.text
Size: 4.3MB - Virtual size: 4.3MB

.data
Size: 224KB - Virtual size: 223KB

.rdata
Size: 6.2MB - Virtual size: 6.2MB

.pdata
Size: 279KB - Virtual size: 278KB

.bss
Size: - Virtual size: 29KB

.CRT
Size: 512B - Virtual size: 24B

.idata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 495KB - Virtual size: 495KB