754cdef6ade045bab2c07e379feb255b9ecfd163ff134f19d929ac73407e84cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

754cdef6ade045bab2c07e379feb255b9ecfd163ff134f19d929ac73407e84cf
Size

15.7MB
MD5

da53ee7bc83b9f07591b8b949635b980
SHA1

021830010a7478e58986a57d4420e2c0f623bd91
SHA256

754cdef6ade045bab2c07e379feb255b9ecfd163ff134f19d929ac73407e84cf
SHA512

a2110f136db359dd4201c84d1590cefc011452fe2fb4bed0ccd08fb81332e8d0d17b6145a4319df94c2418ae372ec0a8472a494666bbeb835955e5b20c835edc
SSDEEP

393216:YeerKDLtLM7/1k3+sIl/fIwKbSA26CyluJFepxC0:8+DLtQxk3elHFKuA26tEEM0

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
754cdef6ade045bab2c07e379feb255b9ecfd163ff134f19d929ac73407e84cf

Files

754cdef6ade045bab2c07e379feb255b9ecfd163ff134f19d929ac73407e84cf
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13.8MB - Virtual size: 13.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE