67819fdcd016cfd1f086feba0e4d2b74 | Triage

Sharing

General

Target

67819fdcd016cfd1f086feba0e4d2b74
Size

424KB
MD5

67819fdcd016cfd1f086feba0e4d2b74
SHA1

43fbc68dd5f85cbf33e34437ab45ebeecae60280
SHA256

5cab4d6ac7766b9cf1e709baa7683ed21357aec6171428df956b1939f74d268f
SHA512

4a6d239993c267a25ff74134f9ca7e996f51a704d0ee239f7ca6e842e057b1183293d51cc5d9cd31e27a5917ef77d9c427c5f6023f4ce76c1db418f066699279
SSDEEP

12288:Kr72BonG7i5VzslbHVbtYLPsfEHlWs9ap:Y72Bon3sFHVx+kclEp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67819fdcd016cfd1f086feba0e4d2b74

Files

67819fdcd016cfd1f086feba0e4d2b74
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 195KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE