06d390d747b55a39f3b3a67d90bf24e8 | Triage

Sharing

General

Target

06d390d747b55a39f3b3a67d90bf24e8
Size

34KB
MD5

06d390d747b55a39f3b3a67d90bf24e8
SHA1

68126cbac0a7d09ff1f3e0789412297088c463fe
SHA256

8ec02358a369afad73cfa96b477c7f38a31b3a43603da2c38498e8f96018f62a
SHA512

b84a7fb983ef28637720c0bcd7329c99a07ba820cd014ca82def4a04fe09f45547c6906aa82432271b2ba96301f07b6b733ad0d37e4ba1c6026c47ad9841c846
SSDEEP

768:Ber2rc6Kpwhqqrv1cnhCF08CjgaxrCzMK5jKGEkw/Dj5wX:BcJQqqqAtCTxCz/zWrlwX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06d390d747b55a39f3b3a67d90bf24e8

Files

06d390d747b55a39f3b3a67d90bf24e8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BY С��
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ