6da8aaa86a251e1c154416e73989440a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6da8aaa86a251e1c154416e73989440a
Size

483KB
MD5

6da8aaa86a251e1c154416e73989440a
SHA1

f3c9a9a45444105c3d4e1bddb0b6e21b4d25e6c8
SHA256

11c8c7c359d533c208b955d183fc883f891b2fc9f7d0996b36b4b0f7358df7bc
SHA512

9b474f8690f9e7f980c5840b886eb2b378caf8ffcb45280fb1b09f284fcc3f0ddb724de3a3255d53f4727082f1a9d96c3adf6591f1e55a58f6032481c9c57e8d
SSDEEP

12288:/8X9pH8Q9UxQMuc/hE4jqD3Amc+N8yHuA:/qcq40qJ8Xb0A

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6da8aaa86a251e1c154416e73989440a

Files

6da8aaa86a251e1c154416e73989440a
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE