07c67ab092fe812f5b6765de4980daf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07c67ab092fe812f5b6765de4980daf0
Size

325KB
MD5

07c67ab092fe812f5b6765de4980daf0
SHA1

355b142b2972342941f550cc0ba015ca2b63fbab
SHA256

cb81d2698a3cc6feb2cbf3606becadc890540ebe241d7710cce2744039e7c18a
SHA512

ba7d2454ae385736e8a4f12bb9b7670549c6a4ef96ac418375c81354afd70a84bdfb59442923c892a4a4ba88c2e564add2f46f35abb949d521394ba4242b8ccc
SSDEEP

6144:8hPPVVxgDdsH54HoYB87rbp7bwYWP1A1UVlF9g1mOYRcXREN+QvboLTm:4PP+E5/L3FH5Sj9gIqhEF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07c67ab092fe812f5b6765de4980daf0

Files

07c67ab092fe812f5b6765de4980daf0
.exe windows:4 windows x86 arch:x86

647b2d25b4821905b4195ff7a6455b54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

UPX0
Size: 512B - Virtual size: 1000KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

??2
Size: 300B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE