6e84fbe61d072007c75975c798756098 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e84fbe61d072007c75975c798756098
Size

221KB
MD5

6e84fbe61d072007c75975c798756098
SHA1

7ea8d54dca32fbc3ad5fa89740b9b8a848e47849
SHA256

f0275854c14e177519c127aa8dc503155ad400b350ed1f25fed5914979a683e6
SHA512

f4878434185440498fcc03b3e29a6c90858bc74dfe539c65e478c0421bc4d79abc5a2c48575743455b6d75730115de52051cbea84653460c9c2ab54d48f7814e
SSDEEP

6144:FlY1IF3A6P+5O9P8CaF4TtSUbSVeEqzLY:FlY1CBUqP8ZEQ1wk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e84fbe61d072007c75975c798756098

Files

6e84fbe61d072007c75975c798756098
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 320KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE