865286d2cff53d11c60fc4355517d960N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

865286d2cff53d11c60fc4355517d960N.exe
Size

91KB
MD5

865286d2cff53d11c60fc4355517d960
SHA1

66655a9262f75c688a7fafa5250094d0e7972f79
SHA256

510e9799364a76e258def4ded3e1ba44cf84eb520db1a653bc4a7384871fd08c
SHA512

394152cba21cfaf21f9067ff0b708d7f3dd4c835852e122519e3768554bcbf4b6f7276c823dfd3bc339772d54dfd3c5c421d08cf2a2538dce5a74823a6962d71
SSDEEP

1536:XJRtlEnBHHIgabuYotV/JbJCX5SBi7JRtlEnBHHIgabuYotV/JbJCX5SBiE:XvtYxOuYotvYQI7vtYxOuYotvYQIE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
865286d2cff53d11c60fc4355517d960N.exe
unpack001/out.upx

Files

865286d2cff53d11c60fc4355517d960N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ