0f9249e084d33462220dd4125b87b32e | Triage

Sharing

General

Target

0f9249e084d33462220dd4125b87b32e
Size

90KB
MD5

0f9249e084d33462220dd4125b87b32e
SHA1

01e1a020eee04e6af8fcfa27d944eba9b9be0123
SHA256

77e26fb6b9fdc30580816d80f56f1cfdd0b1cf6fc5a779ca68ad7f2b82c00172
SHA512

f49d019bd769505575321e0389f6ce164fa5ded3654501a97749384cc9948de036d302d40686274b9b02c6653ade256806c5fc343caecfc5cc7958f1e35b13c7
SSDEEP

1536:l/IhaBifTaCkiqpt3CZa7ggU6sAQPbJnHg9Lg2WYj:l/Iha4fTx9+IFgU6sAcOg2WY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9249e084d33462220dd4125b87b32e

Files

0f9249e084d33462220dd4125b87b32e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE