42da6fe0e97c5f680fbb5fe4d6cd1b36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42da6fe0e97c5f680fbb5fe4d6cd1b36
Size

47KB
MD5

42da6fe0e97c5f680fbb5fe4d6cd1b36
SHA1

6818c7da0cc3c5269b827b6a59bcdd76b427f76c
SHA256

2341a7ebf8a4294e2b8e182cdcac33ba0692249c6aabb0842a19350662b72def
SHA512

5ea5cbb9d07e9dd5ca7f87a4b54e304cb9cc58619641c18999b6769a38566c0e4f29b4140fdfc4fb999d889a6a715c744f865765e514da9fa54bdd3a4e4acf20
SSDEEP

768:C07c92/EyTAYtxqfGNC0klI7C8ycYlI5P194jp4rf/7GVEg:b7wc1aGNC0klI7CPpIFa6rrG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42da6fe0e97c5f680fbb5fe4d6cd1b36

Files

42da6fe0e97c5f680fbb5fe4d6cd1b36
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE