09bf47f40ff0472cfbc323fe08a3981a03f563f32a2bbe5b623caea013ca0da0 | Triage

Sharing

General

Target

09bf47f40ff0472cfbc323fe08a3981a03f563f32a2bbe5b623caea013ca0da0
Size

1.4MB
MD5

469504c5e756fc2810012bc11ba7bf43
SHA1

29cef8794c70e8772710a19775f5eef293b8da6e
SHA256

09bf47f40ff0472cfbc323fe08a3981a03f563f32a2bbe5b623caea013ca0da0
SHA512

86400af1680ad66d77bdda0acec5c73e7635a9db3b91d736bfe0bfb7b39ec881a796dea138eb788d85729a7840cc9e0b21310f2e216799785d73aba0849ce63f
SSDEEP

24576:veIyXsTzpOMM3/cUzuWiz2Tn4A1rrnbP:vpMhuWi6TnJ1r7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09bf47f40ff0472cfbc323fe08a3981a03f563f32a2bbe5b623caea013ca0da0

Files

09bf47f40ff0472cfbc323fe08a3981a03f563f32a2bbe5b623caea013ca0da0
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 728KB - Virtual size: 728KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 569KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE