6bb9d71ff6eb11996649c09073e36208910aacbf78d3f0d582df1717f06ebaf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6bb9d71ff6eb11996649c09073e36208910aacbf78d3f0d582df1717f06ebaf4
Size

4.8MB
MD5

253e9a1e0b61d5fccdc60cd11019bcf6
SHA1

403dd32164008e576e681e6c34c4dd2f265b84f8
SHA256

6bb9d71ff6eb11996649c09073e36208910aacbf78d3f0d582df1717f06ebaf4
SHA512

43937e433bb98fdba7091c16aea6d017d3df60d00730cce94da0b4f10e16d7104214f9ec63583819d565935a41de09355662393d434e96c3acbd3a569f72e47c
SSDEEP

49152:mT2GkVT+j99xsILRgTVrNPB8qP+15OPyrIrsf2r73PFgeEzb3KZJXon6gTvLXxke:wZd/iNPS/nugb+XonDXinAc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bb9d71ff6eb11996649c09073e36208910aacbf78d3f0d582df1717f06ebaf4

Files

6bb9d71ff6eb11996649c09073e36208910aacbf78d3f0d582df1717f06ebaf4
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 198KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE