AADOBLEAA - GTA San Andreas[.]rar | Triage

Sharing

Reason

scan timeout

General

Target

AADOBLEAA - GTA San Andreas.rar
Size

531.8MB
MD5

f369745bf1fc57f139601b0afdc64308
SHA1

9148ac05e910238f39de111c48028a59d382b99c
SHA256

be8a4b3cdc2e593cc7a5ee9c8b496e49c0a388782eee0701aebdc13446867ac6
SHA512

527b5e128489755f98d06e5e5a3ffb3e8379ab9a5d82224b0e4b0449507eb55a7e453b473fff6dc9fcf5c1112385da8e2c7efb6be98a13782c93a857d9089bc3
SSDEEP

12582912:kWgUejtCF3+5tqrdgggtRRo7YOxV2R6kqOiG6EdCEHV2e:kvRtNsgfN8pHu0YhYY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/AADOBLEAA - GTA San Andreas/GTA.exe	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AADOBLEAA - GTA San Andreas/GTA.exe
unpack002/out.upx

Files

AADOBLEAA - GTA San Andreas.rar
.rar
AADOBLEAA - GTA San Andreas/GTA.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AADOBLEAA - GTA San Andreas/INSTRUCCIONES.txt