6bf5a6a945be2506567eb9c05c3f9153 | Triage

Sharing

General

Target

6bf5a6a945be2506567eb9c05c3f9153
Size

124KB
MD5

6bf5a6a945be2506567eb9c05c3f9153
SHA1

2da757384b0a7ff173e252b771a1ba099549b178
SHA256

6c34e44b9208a3338a5b02b36b78cc34325d29c882d60e9b48dc82cc498e8c24
SHA512

2d9762842938303fb7e08686fb2ba5a334b3bb5e7c88a72cd75388d99177c6ef23d9986ffbc89b905c1ddc73a06e84607aa6fc7f36640717904d2ff15757ba3d
SSDEEP

768:n+07c92/EyTAYtxqfGNC0klI7C8yY1YlI5P194jp4rf/7G:X7wc1aGNC0klI7CPYAIFa6rr

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bf5a6a945be2506567eb9c05c3f9153

Files

6bf5a6a945be2506567eb9c05c3f9153
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE