cb996e002863f15961ffe0e06eadf553ab9ae357fa0215585ac50bebe82b851b

General

Target

cb996e002863f15961ffe0e06eadf553ab9ae357fa0215585ac50bebe82b851b
Size

2.4MB
MD5

5eab83289dd130eae159934261a4212a
SHA1

5c01f85ec5f9c4e7c1cdf21baff5d8e35a1bb55f
SHA256

cb996e002863f15961ffe0e06eadf553ab9ae357fa0215585ac50bebe82b851b
SHA512

5e421005007089717c4742c72d94f645141c065a1eafad750648dc17ef30291f327db2454dc676bbe744f1e4c19037c8ace2919afd823f6b2b11712dc9118b75
SSDEEP

49152:mM38M2FCzrCd7FZG0eXcNRMXrX9G0BpITpnm3qC4/ifoPfPjY:mM3D2FCzmpncc+9G0Bpxfo/jY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
cb996e002863f15961ffe0e06eadf553ab9ae357fa0215585ac50bebe82b851b
unpack001/out.upx

Files

cb996e002863f15961ffe0e06eadf553ab9ae357fa0215585ac50bebe82b851b
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 3.4MB

UPX1 Size: 2.4MB - Virtual size: 2.4MB

.rsrc Size: 20KB - Virtual size: 24KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 554KB - Virtual size: 553KB

.rdata Size: 105KB - Virtual size: 104KB

.data Size: 14KB - Virtual size: 17KB

.rsrc Size: 5.0MB - Virtual size: 5.0MB

.reloc Size: 28KB - Virtual size: 28KB

UPX0
Size: - Virtual size: 3.4MB

UPX1
Size: 2.4MB - Virtual size: 2.4MB

.rsrc
Size: 20KB - Virtual size: 24KB

.text
Size: 554KB - Virtual size: 553KB

.rdata
Size: 105KB - Virtual size: 104KB

.data
Size: 14KB - Virtual size: 17KB

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

.reloc
Size: 28KB - Virtual size: 28KB