197f329893a0b2c88547cc1081aac034 | Triage

Sharing

General

Target

197f329893a0b2c88547cc1081aac034
Size

11KB
MD5

197f329893a0b2c88547cc1081aac034
SHA1

c824da3a8f8e3a68e2d7b6f1950b9d9e51a11164
SHA256

dc655a9891835a9a339d03456df14ce2843e08a31ebda55e0c1046075e4faaf9
SHA512

54420cdd92d19dade8b8a491f0f1dfb1afad4d36761363582c865bc2784fedca8e0112e06f807b70688f005394b530c1b158e39bbd110ebcef73d945dd64ff30
SSDEEP

192:nKx8T+c8DFqo4RSgGIelw0uVKRuaLo7lW3D4Dy1/29E3c:ec8DIoKkIelgVta1z4Dz6c

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
197f329893a0b2c88547cc1081aac034

Files

197f329893a0b2c88547cc1081aac034
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Stone
Size: 283B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE