2da31ba3d559d9f02cb41420f7aecac9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2da31ba3d559d9f02cb41420f7aecac9
Size

4.0MB
MD5

2da31ba3d559d9f02cb41420f7aecac9
SHA1

b61a6d6e9fd10c7c8f90624abd8d8b26f8ead2c5
SHA256

93a451362590bcba88bd32a6e93bfe655b0f36dec0e8a2da827fe4a9f3180379
SHA512

94110bb09aa6e891f6735e23cc9a6e6aeac3a58b2bfa09451566755ee4f3c3191ac85b427b78abd3bb76d261a443ab61278182b286d75e2f228b4cdf046351c5
SSDEEP

24576:ndHDoPvFh7eR4UV5I/b50JQu/7kYu/7kdu/U0J8tu/7kdu/U0J8R4UVmdr:nUP6NzIO9C1V18Ny

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2da31ba3d559d9f02cb41420f7aecac9

Files

2da31ba3d559d9f02cb41420f7aecac9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 792KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE