mydoom | 8270f3678c16acb180d7502efcfa5a70N | Triage

Sharing

General

Target

8270f3678c16acb180d7502efcfa5a70N
Size

22KB
MD5

8270f3678c16acb180d7502efcfa5a70
SHA1

062056bd213ec16e62905b55da84923834aaaae9
SHA256

e822e1e3b99e8e368fa3572c9ee09179fdc2fac485019513c181b9f91a33e456
SHA512

180eca3747c850004f8ddcd6ae19be459ade1e08c7ee3840bfa62e097b4561a128ae1a9800b6aa75e8a5d9a7f3e052c02d2445e1be83fa66ff622bd74434faf3
SSDEEP

384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUufXX:SCIqdH/k1ZVcT194jp4ufXX

Score

10^/10

upx mydoom

Malware Config

Signatures

Detects MyDoom family 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	family_mydoom

Mydoom family
mydoom

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
8270f3678c16acb180d7502efcfa5a70N
unpack001/out.upx

Files

8270f3678c16acb180d7502efcfa5a70N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ