8c545d0f75765af6e91f51dde82aeb0f0c94868de17f317d99670f02fa3b3d95 | Triage

Sharing

General

Target

8c545d0f75765af6e91f51dde82aeb0f0c94868de17f317d99670f02fa3b3d95
Size

316KB
MD5

02edcc7ca5fa6f2de34eeccd512fa282
SHA1

b5f5efc49edfae8260facdc395c0ceebdb7e21c8
SHA256

8c545d0f75765af6e91f51dde82aeb0f0c94868de17f317d99670f02fa3b3d95
SHA512

775421b385ef3c6429722af7a5e498a7a66cb96073894c636137cc6e122d0c4a88a0a2faaa0cf1d13b4acb86b16cea39083ccabb54b7b1b20bc6c908f63c27c3
SSDEEP

6144:gBrIO5XNujoXZ+QP0yjSSkGJe3idxhsA9XhH79jr2SlFp57XLx7FO2tVHMZU:aIO4oADLaDr9XvHLvQ4qU

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/U盘详情检查.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/U盘详情检查.exe
unpack002/out.upx

Files

8c545d0f75765af6e91f51dde82aeb0f0c94868de17f317d99670f02fa3b3d95
.zip
U盘详情检查.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ