416c8f19c68d8d2f1c5fe7d7db5b5eaf | Triage

Sharing

General

Target

416c8f19c68d8d2f1c5fe7d7db5b5eaf
Size

29KB
MD5

416c8f19c68d8d2f1c5fe7d7db5b5eaf
SHA1

52321766c9aaeaa5b940c266934641c2da8d0841
SHA256

aec87b55f24f28114a7bd57c88d659d134f3c6bd6975c94516e8ada29444ab61
SHA512

895b2f66e202e7e78ed4942e7457bcbb1b8691aeac903f91b718d4644d7e016eb3451194a7c75c2957b97eeeea8a8158e8bf05a4b4cb71281490fd09000fd945
SSDEEP

192:onaA+gSf+i3MEkZoVwf8skSfioC+60pL8rsEygg2LxDwHsK/m5me9:ZAbSfZsDfCqZCNCLNV2Ce9

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416c8f19c68d8d2f1c5fe7d7db5b5eaf

Files

416c8f19c68d8d2f1c5fe7d7db5b5eaf
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE