415f421611fbcbe9665f3844245eb710 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

415f421611fbcbe9665f3844245eb710
Size

97KB
MD5

415f421611fbcbe9665f3844245eb710
SHA1

d791a84be6b080daabeb161e4ea61b2d296f6cce
SHA256

060de536232bcdf938848208eceae7098f255c34d45e68b7d08ec12fb42af83e
SHA512

b23991381204ad62868eae9283329ac74b4e277f41b0b667c87796a399b449849e5a9cb20b00eaf8dde3b5f2aa9f6b9af734cab2c4cdf3d07a25b83fd0de4d55
SSDEEP

3072:SKcWmjRrz3f/tkYGccezf/VNgmeMCcJ3R43GX6:hGfs/eUmeuh16

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
415f421611fbcbe9665f3844245eb710

Files

415f421611fbcbe9665f3844245eb710
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE