08d8c00d889a5ed96a1e90b342c2daa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08d8c00d889a5ed96a1e90b342c2daa2
Size

99KB
MD5

08d8c00d889a5ed96a1e90b342c2daa2
SHA1

f4e892a4b21966163a0c691e0532471bd46a80f1
SHA256

baae3efaff976604b18753f4612fbec4fb179bb7a747dfde7b50953d535830dc
SHA512

1cbdcc8c685304937b58c3f3d4337fe27dda0a4dbdecbf5810fdabf06e210651d605e1d645353f47aaab757cb607f1d0146fc48b7c819b406c9177c22edc64b4
SSDEEP

1536:HR9wMS8R5W91HkbFY539Tp5dBK19RC+I18oFTTgB2t4f13+xPVX0dhyJ:HRpi9J539TpNP+IR+At4f1Ox9Es

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d8c00d889a5ed96a1e90b342c2daa2

Files

08d8c00d889a5ed96a1e90b342c2daa2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 320KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XOR
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE