a8c80a72f60aa0a7afc3d4f3c3686620[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c80a72f60aa0a7afc3d4f3c3686620.bin
Size

71KB
MD5

a8c80a72f60aa0a7afc3d4f3c3686620
SHA1

1c71f2713b43a45f50b863aa08b14dca3ee7e04e
SHA256

a874706dd10fa813ae2a2fe68654286c45dadd198ae636989d5f2507ab66e6a1
SHA512

f7951c468b8fb90de3bc35d4956e3d9954310d30991eaf5712e1f90083a10fd51b8ee13c270c2fda3406b6c35d06e8f113bd05d0add20071b9049424a3b9fa91
SSDEEP

1536:rAiqYVsMe80ZTy0/rwENpf9fGATpc0bW5BjFe:MmVW8iTX/3Rflcb3jFe

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c80a72f60aa0a7afc3d4f3c3686620.bin

Files

a8c80a72f60aa0a7afc3d4f3c3686620.bin
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE