831573edb0f716ccdd38565023a5c195119fb7108fe3ab737a26d300d7e59365 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

831573edb0f716ccdd38565023a5c195119fb7108fe3ab737a26d300d7e59365
Size

457KB
MD5

d2e7ff62af3492d9d915fa65028cd331
SHA1

c691a4cccaaa7b702886427744c02ec4f454ac9f
SHA256

831573edb0f716ccdd38565023a5c195119fb7108fe3ab737a26d300d7e59365
SHA512

ffba5ea4bc77fc53bfeb7229a0957bc6c5b728a6f3e3aa83c2021515401924bfae6766e6e11e2c0b851d0b4311777d50176f4dbadb18a7113841d15dff6e5afa
SSDEEP

6144:Qw3cXKbSO/s39caf1tTt860FlzKIJrEhvcUJhlg94kbKCzY1Wf2222EhsZvEY:QSmyCcaA8IJrEhvA9TKH5

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
831573edb0f716ccdd38565023a5c195119fb7108fe3ab737a26d300d7e59365

Files

831573edb0f716ccdd38565023a5c195119fb7108fe3ab737a26d300d7e59365
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE