24181940b89fe7f5b89ea05950c2cdcd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24181940b89fe7f5b89ea05950c2cdcd
Size

126KB
MD5

24181940b89fe7f5b89ea05950c2cdcd
SHA1

0f5a81ffe95f014d7f3a9ee5847f71e9fa04cc88
SHA256

7a12de538c48f87dfbeb233767ced744821bb02111d61d76261cd15be7bf62e2
SHA512

17f5d721f6840ac84441b4715d255e899262e1bd1d09eef2736f524fba0792ddba262b24fc78ac06de6313a13b7abdd8b73b2682a91ad1446c4cf6313c9b786b
SSDEEP

3072:SKcWmjRrz3ZKcWmjRrz3Uuu0TBn+fm9l7i:hGyGUeB+kli

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24181940b89fe7f5b89ea05950c2cdcd

Files

24181940b89fe7f5b89ea05950c2cdcd
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE