46ef2370d754fdc2a3ee8b9bd6438862 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46ef2370d754fdc2a3ee8b9bd6438862
Size

6KB
MD5

46ef2370d754fdc2a3ee8b9bd6438862
SHA1

d203848fbadf7c8a0bdae4cf3c6e923fdb20a7f3
SHA256

ec46251a06f47d086dcf3f766dfb5b4adc71af9d9a1c89c2cb3d5872206ffada
SHA512

e46b43c0341613546416f62eac62949547a949590cee8c2e1ec91e92c412d9b8d54cd936783d0fb9216bf2db971193b7b3660c1f0cc03d986449a411b275f89d
SSDEEP

192:JaiobWFhHtckHMdXCc5tgWS8DJkvgVmbCj:v2WFhGuYXCcwzeabCj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ef2370d754fdc2a3ee8b9bd6438862

Files

46ef2370d754fdc2a3ee8b9bd6438862
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 324KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 485KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE