4b77e31346a7fc1f14d17ccedf6ef974 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b77e31346a7fc1f14d17ccedf6ef974
Size

21.3MB
MD5

4b77e31346a7fc1f14d17ccedf6ef974
SHA1

f94404c31d4b1726bac6aa5484b682bca49fdd50
SHA256

37b7d00a122e1a5fbc7ed3e258ef83a5344fbf846205b41e708afa707fd95f62
SHA512

9941a30e7d3f90614fe0cae1ab7d0c250f51ff52f6f4f025ce5eb44a8791f48e7d6742e726fe221d103f6fe7327733843f3651afe7999e14e4d77472784d9724
SSDEEP

393216:ne9OwL9OwawL9Ok9OwL9OwawLeL9OwawL9Oj:y3xF3sxo

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b77e31346a7fc1f14d17ccedf6ef974

Files

4b77e31346a7fc1f14d17ccedf6ef974
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 792KB - Virtual size: 900KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE