1b4ae135ad7f9837407f2bc097eb099e54b5665365b80f1b3b7a6ce6fbca9996

General

Target
1b4ae135ad7f9837407f2bc097eb099e54b5665365b80f1b3b7a6ce6fbca9996
Size 301KB
Sample220319-psd4hsaab8
SHA256 1b4ae135ad7f9837407f2bc097eb099e54b5665365b80f1b3b7a6ce6fbca9996
MD5 4af5f47afaa5fd84a3d1557e6acd7f4c
SHA1 d335722d4ee5fbdc38916254de8ec03da15e68fb
SHA512 d09773f265af8c93780204529122bd85c1ed88e08bc0c2766b766c1adcd6feeece64910b0ddc6823585ed5959d519b9be4a2896897c26c1a81e965564054ce44
MD5 SHA1 SHA512

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

SHA256 1b4ae135ad7f9837407f2bc097eb099e54b5665365b80f1b3b7a6ce6fbca9996
MD5 4af5f47afaa5fd84a3d1557e6acd7f4c
SHA1 d335722d4ee5fbdc38916254de8ec03da15e68fb
SHA512 d09773f265af8c93780204529122bd85c1ed88e08bc0c2766b766c1adcd6feeece64910b0ddc6823585ed5959d519b9be4a2896897c26c1a81e965564054ce44
MD5 SHA1 SHA512

windows x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Minor OS version

Major OS version

Entry point

81256320

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths