142c97e3309f96d734f83d5669005670 | Triage

Sharing

General

Target

142c97e3309f96d734f83d5669005670
Size

405KB
MD5

142c97e3309f96d734f83d5669005670
SHA1

ab5b9c8bcc86efd2d39674e2b7025ae8f4a4fe5e
SHA256

280c24a73764a85c57dc7a1ff2b30dc378923dad5c84c413c85751d7bde2c037
SHA512

db64bbb0297fd53b19ea1c6560a75ca64059189db0a208781d76c5a140e6c2fefbad087b84b4df994d47c2d201eaee99c6237f63b64ab081d377940485610d40
SSDEEP

6144:OEcvV4Fustn8MnUI8/wkkqxkEpiMkR9ve/wwxxkl:OBV4FustW4kkbEpiMk3ve46Wl

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
142c97e3309f96d734f83d5669005670

Files

142c97e3309f96d734f83d5669005670
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE