103b9736879187b919d4588d22ad6101 | Triage

Sharing

General

Target

103b9736879187b919d4588d22ad6101
Size

148KB
MD5

103b9736879187b919d4588d22ad6101
SHA1

6a0bc8ff01f97c65d333dc88d56ba01e55c924eb
SHA256

f989e59515ab57db44d89d85bc4070bf62d4b3175a0f181c6b85316a9728728b
SHA512

03d9059be31814b9d3c23f568e36aec3aa1c8c9ed0f7c22fd91d96bf354e2571d4f78822c28ebaeec887869caf70d5506a24f752d2461511052c32e0904cdbb5
SSDEEP

1536:LwmYBwCBH5nW0Sg7iAD8GXN+I7fJ+aCl1fe:LwwCBHEElzoI7h+aS1G

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
103b9736879187b919d4588d22ad6101

Files

103b9736879187b919d4588d22ad6101
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ