ffbee5218658780aab0779357d9fc667 | Triage

Sharing

General

Target

ffbee5218658780aab0779357d9fc667
Size

1.3MB
MD5

ffbee5218658780aab0779357d9fc667
SHA1

fd926b2caadad1c93cde1cde773937bd22f7b947
SHA256

5bf71e92f6a98c7a3051e49a4f3b8387a1f3f6f349feaa17acdc55ef7e9a679e
SHA512

9ef8c399782603190268d56bce6096dcb61ad26f1e14e03a8248338cd18f26bc10e41fa9783dfb361a101f3381893663d067464258e841c8741af94f28c50553
SSDEEP

24576:K95ooKw0UYoVJ5jbUVlAUGwNbwPWnuCXnw8I6TvvtBJ+d9pu80roJvKeSWta3t4T:AWoKw0UYiJ5jbo5GqbwPWnuCXnbRTHtW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffbee5218658780aab0779357d9fc667

Files

ffbee5218658780aab0779357d9fc667
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.plts
Size: 512B - Virtual size: 4KB