0bf4f071ee9c5f40a3327980ca31509fa64f967f6d26a2794239fc8f72d501db | Triage

Sharing

General

Target

0bf4f071ee9c5f40a3327980ca31509fa64f967f6d26a2794239fc8f72d501db
Size

545KB
MD5

c3e1c7a69b3d95030c46e3e5bd1a24ee
SHA1

bc9eb2027cc661e0866e7658682cdc9baeec3afb
SHA256

0bf4f071ee9c5f40a3327980ca31509fa64f967f6d26a2794239fc8f72d501db
SHA512

ae8bcabe8a84579228367197cef952c92a1ef2e8619f2b554c70e469683bc0ef15215297da31ae504f8056652afeb31c93f6e4d670843cfd81d6bec79763c686
SSDEEP

6144:mhjxrU2+7kO+4LT9FD/QzVkJpFYcEOkCybEaQRXr9HNdvOapC6:mvr+M4H9FruVkwOkx2LIac6

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf4f071ee9c5f40a3327980ca31509fa64f967f6d26a2794239fc8f72d501db

Files

0bf4f071ee9c5f40a3327980ca31509fa64f967f6d26a2794239fc8f72d501db
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 260KB - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE