4b2fa80854d435f38cf60942273f72c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b2fa80854d435f38cf60942273f72c6
Size

535KB
MD5

4b2fa80854d435f38cf60942273f72c6
SHA1

6c7a3a1b38c6596413ae24ddb15c34d665bf67f9
SHA256

77ea8ff7ae2289cf09e6eb4f6cfab7c73027ea3ce42277e852449b8a465d4d4a
SHA512

8cf1ba2e952859db4138d2d50a45969975e9a3c9d36975af6df98ec9da01039164715628b37a41a43bc919c6a79adf22c935a3c0602e8acb41d07d27ce5408a8
SSDEEP

6144:Dc0yb+oSYxMVpL39QPLscyNOQ+jB37Svqt0ElHLtbabtnbuncUYogtNf9QJnlANx:DnyioSYx8pSmQB3pxlHxbaAzeX9Qf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2fa80854d435f38cf60942273f72c6

Files

4b2fa80854d435f38cf60942273f72c6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE