The back-end upload will attempt to set the file permissions based on your global setting (done in setup). So if you have permissions at the normal 0755 it will attempt to set the uploaded image to 0644 which is what you want. It that does not happen, then your ISP has disabled PHP from changing permissions. In that case there is no [php] script that can help.