1929119df8f6b67e88cc0c8f0f14509c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1929119df8f6b67e88cc0c8f0f14509c
Size

304KB
MD5

1929119df8f6b67e88cc0c8f0f14509c
SHA1

f583663db0765abfffd3f169a111bd40148ddfc4
SHA256

a168c17c945241c5d6038988ea39db3132877618b9756b18960993590ae0bd2e
SHA512

c1ca9307bf2777873369bb205f9a385bc4f916675614ff3bb842b86dd8667496e49b0e3d6325c1d507150e344bf64acf57f2e712f16ecfd069005cbf6db34253
SSDEEP

6144:C0ohJO8Itwr0a/reMLHaeQFAc8hLFWDXYGk1btgXM7i5T1fNvo2o7oS:C9SGTe6HaHFAcehW+1btgcQq7oS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1929119df8f6b67e88cc0c8f0f14509c

Files

1929119df8f6b67e88cc0c8f0f14509c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 296KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MCTeam
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE