094861a2768efd6c30356687a7473a32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

094861a2768efd6c30356687a7473a32
Size

25KB
MD5

094861a2768efd6c30356687a7473a32
SHA1

ed35bc12892069d29e63c0e14e02af82302b5f70
SHA256

636c04c57152160fdb963fde40b07a460916f6660b3714f1aee8469f2dab5be3
SHA512

9de39c1d4b382276664970688c5998d8c90765926364a90b59a33068c6df151d6dee694bbcb5991d9d3420f4b2df53e3f75e783e92d0ad9f07b109c7b4abc193
SSDEEP

384:RFZSr+gFI7cfcO4ApaM1mNxtbPCBqpa4E9N49KATIVt1gxitU8NRxcnR6/gnLdOI:RFZ5gWcHe4Cja4QVtWxV8+nRXZ3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094861a2768efd6c30356687a7473a32

Files

094861a2768efd6c30356687a7473a32
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

edata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE