266a41e0128126bbd790edb43dcd17761150f16e45bc23aa2b71a7ba715e18e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

266a41e0128126bbd790edb43dcd17761150f16e45bc23aa2b71a7ba715e18e5
Size

3.4MB
MD5

bbe2bcc36460c263489229082af3f2ff
SHA1

ecafe2f0873460e0e6da54f4873bb88c0e5035f3
SHA256

266a41e0128126bbd790edb43dcd17761150f16e45bc23aa2b71a7ba715e18e5
SHA512

57861e88d77f0a2eb8a71b8e12be63899b7a194ef2fed832220b576533b1e4b89fad0ae62b3af7db6af3edcd3022a4f467670a407c9123b6f3d770f4e63e750a
SSDEEP

49152:eQQ3ZlFXXGuRDKJRPz/1ccAuUr7rQiYqsaXNnu2dk0AwGk:HQ3ZlFXXGuRDgZ/1ccArPYq97k0AXk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
266a41e0128126bbd790edb43dcd17761150f16e45bc23aa2b71a7ba715e18e5

Files

266a41e0128126bbd790edb43dcd17761150f16e45bc23aa2b71a7ba715e18e5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 282KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE