26c0304d7c0129ab00684e371da591da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26c0304d7c0129ab00684e371da591da
Size

198KB
MD5

26c0304d7c0129ab00684e371da591da
SHA1

becdeba967472080c28c2a9fdf36c85e71c97098
SHA256

dcb8616289a53b1dc155cc329bfe8ed3034fd9333b2e78ff3dbf6463216777b6
SHA512

12140f73f3ad98b42c99aa36976c8298565459b10daaf6fd6a77a06de1aff574289c7ef6cd74a2283138ae9bca106dc21a29b46286ae7d077d7831402da0ea95
SSDEEP

6144:KuII8f4PwFMYfbprPtePZbgQeLuB45ecy+:x6f4nYfH4RgJu2Ec7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/SuperScan 4.0/SuperScan 4.0/superscan4/superscan4/superscan4/SuperScan4.exe	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SuperScan 4.0/SuperScan 4.0/superscan4/superscan4/superscan4/SuperScan4.exe

Files

26c0304d7c0129ab00684e371da591da
.rar
SuperScan 4.0/SuperScan 4.0/superscan4/superscan4/superscan4/ReadMe.txt
SuperScan 4.0/SuperScan 4.0/superscan4/superscan4/superscan4/SuperScan4.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 332KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 197KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SuperScan 4.0/SuperScan 4.0/superscan4/superscan4/superscan4/registry.txt