80da9885b53958c9432d965b194bcd9d824b83f8fdfeccfa0c0e9ec70fef7802 | Triage

Sharing

General

Target

80da9885b53958c9432d965b194bcd9d824b83f8fdfeccfa0c0e9ec70fef7802
Size

397KB
MD5

71ddad2296c2592c757782415a75ea2d
SHA1

5afee34ee90a4dba9c36dc0da3b6b9ad8fd4e5bc
SHA256

80da9885b53958c9432d965b194bcd9d824b83f8fdfeccfa0c0e9ec70fef7802
SHA512

70bdee9e2aeececb1ac0fc36c0be91810bfec7d9d4f03c0f84350d1f3956a9cd85bb2c26eedeb2c4b72dda2ee09ded735dc8c07147c8066fccfd82ff58b1d729
SSDEEP

6144:Pqg/d/UVrsGQ4xY0k9s+kqkUsmxUJvRRT1Leg+8NS5MuJX1lXa69Xv8h:PqGd/U/Qd9RkDJvb1Ll+8N4MglXfh8h

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80da9885b53958c9432d965b194bcd9d824b83f8fdfeccfa0c0e9ec70fef7802

Files

80da9885b53958c9432d965b194bcd9d824b83f8fdfeccfa0c0e9ec70fef7802
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE