a95a134c0c9e8775b11ea10c27444cd1113d3662d984f1e5f95d20a21d6e069b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a95a134c0c9e8775b11ea10c27444cd1113d3662d984f1e5f95d20a21d6e069b
Size

1.8MB
MD5

40d7af0fbf9d53a3f8101a87598f3634
SHA1

8a078c76b21457025457b5fc7405cd8f25299ccd
SHA256

a95a134c0c9e8775b11ea10c27444cd1113d3662d984f1e5f95d20a21d6e069b
SHA512

28424ef599369b5a99f03aa607ae6eb73562a70468a47e3c00e4975aae9f15503f6de4561e15a8c00d3a6bbcf758fb41a6889b50f624d914f6602758625194ab
SSDEEP

49152:1HVQHa7rxv0AIUwF9g1bKx8o+N0j7Nv41PQl6eTw56O+FWxFjomP:1SaRv0AIFv8o+S9WeRBFGFsS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95a134c0c9e8775b11ea10c27444cd1113d3662d984f1e5f95d20a21d6e069b

Files

a95a134c0c9e8775b11ea10c27444cd1113d3662d984f1e5f95d20a21d6e069b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE