d673611d726d39cfbcf3f28f5834b44cafaff82d70eabc9a0e9ab111549abcef | Triage

Sharing

General

Target

d673611d726d39cfbcf3f28f5834b44cafaff82d70eabc9a0e9ab111549abcef
Size

843KB
MD5

72d713ac7194e970b5d7f927967e3688
SHA1

b4ad499cdcb1d3409270ec9b86b6deb9397a28ae
SHA256

d673611d726d39cfbcf3f28f5834b44cafaff82d70eabc9a0e9ab111549abcef
SHA512

59f60ed53470a09e2fa7db16ba41c990894260ca923614a0a9ecc77e008c718d4771193d73a0243408b2a1efb64a4e4e167c25d8d46e39e3cd306f06e9546636
SSDEEP

24576:iKnZJNXNon3Nr+C+l/pB4dCHyWdVbStQyRVp:iKnZj6ul/p+WnSt7p

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
d673611d726d39cfbcf3f28f5834b44cafaff82d70eabc9a0e9ab111549abcef
unpack001/out.upx

Files

d673611d726d39cfbcf3f28f5834b44cafaff82d70eabc9a0e9ab111549abcef
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 824KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 842KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ