4c13540040a4e08b12c1ccf7747f4fe27b7859be223e91f590fe48f0c46619d3 | Triage

Sharing

General

Target

4c13540040a4e08b12c1ccf7747f4fe27b7859be223e91f590fe48f0c46619d3
Size

843KB
MD5

7b0318d43ba06384a743e9083be1ed0d
SHA1

754cd2a05b6229490983291599a403e2886d52f8
SHA256

4c13540040a4e08b12c1ccf7747f4fe27b7859be223e91f590fe48f0c46619d3
SHA512

cc03f496b2b84828fedc2894ddee805b6a0365fa5a0588ee51af333ffd26af8f213d1efcaeaa491e264c713887cc820987dcc7886b5330b9abcdfe6e4b8f7df9
SSDEEP

12288:EZsCnLK7F9Z54oNrXNon3NE6+YzTalLbDGg4+qjIj5/KzmDiJtzcrq:yKnZJNXNon3Nr+C+l/pyItyzmDiM2

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4c13540040a4e08b12c1ccf7747f4fe27b7859be223e91f590fe48f0c46619d3
unpack001/out.upx

Files

4c13540040a4e08b12c1ccf7747f4fe27b7859be223e91f590fe48f0c46619d3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 824KB - Virtual size: 828KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 842KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ