6d8efe9332d42db41195adccade8a8e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d8efe9332d42db41195adccade8a8e0
Size

101KB
MD5

6d8efe9332d42db41195adccade8a8e0
SHA1

544b72f1e475e9a03173d38fed663671451e4cbc
SHA256

e758b1ee42680d7bef32f3987404cb69f7d9d2970e90afc69994ca84ecdad176
SHA512

023d5b31135a983df63a87b388f7b2849472bba7f19c72c824e807d84b30256abb9f09cf07cedb027e3c48fb1c13244a024b944ca71106f5c30a24169e96d93a
SSDEEP

3072:tlnBz/m4zvKW2NXUF71YG9QCXZgCc9N63MC:PnUmvr4kIGNb3MC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d8efe9332d42db41195adccade8a8e0

Files

6d8efe9332d42db41195adccade8a8e0
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE