69d41b80df7f6507f7c05395ee22fa94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d41b80df7f6507f7c05395ee22fa94
Size

62KB
MD5

69d41b80df7f6507f7c05395ee22fa94
SHA1

a8df87881b0a0a4bbff27bb7f6ee939a3dbe18ac
SHA256

42cc1e8a196455e4bfc86bdf5588e045ceea478b8c57257c36777dfa856d5ca9
SHA512

03fcb13bd40e9cc573acc7ead6897ea92ff6ecb247d4b5d70043bc17cfbd495c6a3bab4525d29170b8cb0e480c359b837adf9503a327fe6f14d35d43e2ed6a56
SSDEEP

768:88aHorBaE292CaVxKh95JWX+svdVxk30x/NcawOnJx7LzJFnToIfP:cHoVaENDKVK+0/xa0rcawOn/JFnToIfP

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d41b80df7f6507f7c05395ee22fa94

Files

69d41b80df7f6507f7c05395ee22fa94
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX1
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ