a78f53fc03215b964c2b02b4dc746ea641114cd8802bec899a3c63c700d50ac4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a78f53fc03215b964c2b02b4dc746ea641114cd8802bec899a3c63c700d50ac4
Size

1.1MB
MD5

af9bd4d80caa53a52279992f528acb8a
SHA1

38464ebab95c16abf712ca17d3ed774eb69c574c
SHA256

a78f53fc03215b964c2b02b4dc746ea641114cd8802bec899a3c63c700d50ac4
SHA512

67324542816bd6dc98106504400a2ba4c855dd5a38dccf7547e366840f23f049a36cab06bed550376c2abd87e5f7296b6deb1ced90eb79aa51f2529f2611bc79
SSDEEP

24576:7QUOk9hW8r022PnXQSrZoalcBCgTvB3G4H:7QU2ISr+WmTV

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78f53fc03215b964c2b02b4dc746ea641114cd8802bec899a3c63c700d50ac4

Files

a78f53fc03215b964c2b02b4dc746ea641114cd8802bec899a3c63c700d50ac4
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 772KB - Virtual size: 772KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 332KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE