0b9e8dd2db886394eaef5f5a41ac755a | Triage

Sharing

General

Target

0b9e8dd2db886394eaef5f5a41ac755a
Size

13KB
MD5

0b9e8dd2db886394eaef5f5a41ac755a
SHA1

9c756400f0ffead3e65501969ebb29d4018da020
SHA256

33b2a911f0624a837671462a6fba325031c2dcd5ab429198084d0686bfbdfd3a
SHA512

85a1a8418d222a2018dbb621a6e5d6a5333df57e9f1ace7b192e5cbcc6af3922e96314e9cfb501745340787b77bae817fc4cf0c7b225e7af0337a070f7b22279
SSDEEP

96:iPskr+WSAYtYceAGrnCj70MiLlI9okvU7jFf0AgsEsjgBGNJM/Njb6ujZc+xXs/Z:ikZAMQ3Cj78uvejFf4FZMR/YxvnA

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9e8dd2db886394eaef5f5a41ac755a

Files

0b9e8dd2db886394eaef5f5a41ac755a
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.WYCao
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ