1ba8413f8b5a7a02e54c5bd9e47bb5bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ba8413f8b5a7a02e54c5bd9e47bb5bd
Size

1.4MB
MD5

1ba8413f8b5a7a02e54c5bd9e47bb5bd
SHA1

4a75f976fea45df63cf6af22c2b3bb54741f4818
SHA256

15db28eea520daf2133cf14b920faa1d3eeb1b1c5bd333bfb3fcceeabef3af81
SHA512

43a9f69c96df26ce306c3f747ec464528156e5edb8b487d1f1b69a78ff5f5df9254524bd908bd8a88b3ca364e438a0c1ce3b112c2d2c2e72b440a515e39fa56a
SSDEEP

24576:F6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6EQ:UY9UORVOM1jJHzaiape0hsABFRJch6LM

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba8413f8b5a7a02e54c5bd9e47bb5bd

Files

1ba8413f8b5a7a02e54c5bd9e47bb5bd
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE