03844457d60ff8c819a313a290ef9a4e | Triage

Sharing

General

Target

03844457d60ff8c819a313a290ef9a4e
Size

296KB
MD5

03844457d60ff8c819a313a290ef9a4e
SHA1

6e52b6013c138c869a5314216dad014c61c149c5
SHA256

59aabc9e2dc44134f8967c323e4bb13e11f00d0685c98b75b30c170a92d9a4e1
SHA512

27722f23c056871093f41c070201c10010f54f8d7c9147077a6c7f85590fc5106f6d7ddbc54ebe18aec9d89f8d40d8877df6b12bea39686a1aeb7fa8d1c5773a
SSDEEP

6144:KiS163P0JZ9GpzcIoyaKHBPkRrxu7tN9lGMvuOboalxS2oS:KEclGaIogHBkluZNjbbxS2oS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03844457d60ff8c819a313a290ef9a4e

Files

03844457d60ff8c819a313a290ef9a4e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 492KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MCTeam
Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE