4defaaf2fb7d740bb4f7739f947955d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4defaaf2fb7d740bb4f7739f947955d3
Size

337KB
MD5

4defaaf2fb7d740bb4f7739f947955d3
SHA1

d9be53bd5644f60e74fcea4ad0c3da6c7894cd15
SHA256

624ba2fe1be13e1f8527b93e2bf5c61970a0fca44f1bcba401d03a7a4055db24
SHA512

7692eeec25e371df019be2b29a57486fe40d06335eaf279e881dd34750f4e5f82f0f27a783009c68ad2dee8428856770bc5712bd96feef1ed4f3bd1f254f60e2
SSDEEP

6144:Q8zNv88VauSet0SPAp8BSk5FJIMy/h8YeKfjd9GSs6:n7Vietu84k5zus

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4defaaf2fb7d740bb4f7739f947955d3

Files

4defaaf2fb7d740bb4f7739f947955d3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA