4e8ac5b63aea6907622e90891ae46883 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e8ac5b63aea6907622e90891ae46883
Size

83KB
MD5

4e8ac5b63aea6907622e90891ae46883
SHA1

8ea2684ad4bcce1dc0a8f25838a6892d1ee46875
SHA256

60ace0d5cdb55047d5cd9d0eb9948bb78103ba89cb4a4f1b04b5be1ff2d7553b
SHA512

fa67d87e796232f7ceedf7b1efc1d7da7bd0c1766ea65709571347ff66121b216975bcbffc11df7f8535af34708bfabe5d6ac9bd7a7c09e057fc10d40c6efc31
SSDEEP

1536:XCiET9nYt8Om68iQ1fqOW7L4vIp2zNkiUD1ZISTdwdb2Q9aKaODv1:XES8B3iqyOWwwoK5D1qdbdhaMv1

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e8ac5b63aea6907622e90891ae46883

Files

4e8ac5b63aea6907622e90891ae46883
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 614KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bunndle
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_MEM_DISCARDABLE