152934ede0a448f43fd0b9ab9e9e66f8[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

152934ede0a448f43fd0b9ab9e9e66f8.exe
Size

903KB
MD5

152934ede0a448f43fd0b9ab9e9e66f8
SHA1

24e13780e06fa8f86a9a8b03c438bf187b6f37a9
SHA256

071cd5f18689361937294427a6f367f11ae02300d67103d2285a9453de440aff
SHA512

a0c29b2fbdacf5072f279b36e471aaa4607cb1f4f735eb6c0d2e9e5a5c068d042c9f28f714df5a44f7a7f1e74315d49a85db6b216a7e3932a10e0374fc4f95d3
SSDEEP

24576:bSLDO9Emh2WXC5FD5CRHKQvPQX5Ey6LETUtD2g/Ca:b8mh2WcFDGqUQX5Ey6LrN

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152934ede0a448f43fd0b9ab9e9e66f8.exe

Files

152934ede0a448f43fd0b9ab9e9e66f8.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bvxzt
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yno
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vzkj
Size: 512B - Virtual size: 4KB

.kemyz
Size: 512B - Virtual size: 4KB