b7d95dd3aedcd82555daa10526e2e886554ae321b5c4cd9257c681167a5c9b87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7d95dd3aedcd82555daa10526e2e886554ae321b5c4cd9257c681167a5c9b87
Size

44KB
MD5

c8b329f2080f80ec8fb6f6c5496e38df
SHA1

6282b2f673155207bf551b3805f228e3ac5d03af
SHA256

b7d95dd3aedcd82555daa10526e2e886554ae321b5c4cd9257c681167a5c9b87
SHA512

f3525d4b28aafe111bfe56ac676925e21133fe27d7c46d88286651616ec6edfa5ac847c077b8a63fbc3214b771e2ceafc1175f24f190a41e69fcde62f77e1cdb
SSDEEP

768:WdO66kgWk74VxrldjYjkHwpXGOVKwwVJfULIS:W9M0PIjkQUOBwV+IS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b7d95dd3aedcd82555daa10526e2e886554ae321b5c4cd9257c681167a5c9b87
.exe windows x86

ccc8b11912d047f9e4443815270ffa12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord516
ord593
ord594
ord632
DllFunctionCall
ord601
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord100
ord616
ord618

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

UPX0
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE