460a01209c6803f299913429e6d5d247 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460a01209c6803f299913429e6d5d247
Size

328KB
MD5

460a01209c6803f299913429e6d5d247
SHA1

3f9b5fa1448dd1055c21d3770aa349a3f874de16
SHA256

57db9aec70c43e3d353e702d9d2b4cb3dcf5899b22678d8209f6e9b41a8226f8
SHA512

f581d7abc1d4e4119967d5da3af20f576345b21b003e80b2ce1b867c301026b80476a0821468770db82571fe2dca82dd8a16f99dd31ffa88e1d7d3bf0afce3c3
SSDEEP

6144:zknN4CVUIm6uk06ZLYgvBA+8xmrxgmA+3cclptVopAuifbi:gnNhuBoY8SorxgmA+nlvVluqbi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460a01209c6803f299913429e6d5d247

Files

460a01209c6803f299913429e6d5d247
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UUPX1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE