ff310ae3a869bb6fe689346200469cea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff310ae3a869bb6fe689346200469cea
Size

752KB
MD5

ff310ae3a869bb6fe689346200469cea
SHA1

9466bfadf71f2c6a9f6e0ffcb331fd118431ee0c
SHA256

beefba0e3b607d897130b17fed928459961357c2308b96a4f8f6523dc9194819
SHA512

c00d7fc553f233b43147befed461aa2b3f74ed1ebcdb01e1d9cdcadecf5f47b8624f19df4fdaa9215417fca0b98d1c4b099c65586fcc1e52b7a8f4e94078a614
SSDEEP

12288:1vdgvd5t+Q0L55FTtX7gbQY/rCHBmAutrnb8AML/foSMzU:1vdgvdSQqJy/2hctrnbNMzOz

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff310ae3a869bb6fe689346200469cea

Files

ff310ae3a869bb6fe689346200469cea
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE