277173c9346fb38254aa5f62ce29519f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

277173c9346fb38254aa5f62ce29519f
Size

14.9MB
MD5

277173c9346fb38254aa5f62ce29519f
SHA1

29886e9eab7c63aaeef5054ed69f4bc53491e790
SHA256

be268cb913f3fb1df60ea2303cd4a68dcb2bbd47fc2b3a0ff167033f2a91b527
SHA512

d2441bf547757ac55d1c436aaeb5678f92f5d410d859851b476c10a3c3cf78f023a7c163e8f70dd3d5e637fcd3d71c8743cbfadf875e2972c38d7e3a8f7cec91
SSDEEP

49152:nUP6NzIO9C1V18NtV1cVGC1V18Nt9tV1cVGC1V18NtB:ne6xIOwP8nPcLP8n3PcLP8nB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
277173c9346fb38254aa5f62ce29519f

Files

277173c9346fb38254aa5f62ce29519f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 792KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE