6468a6ec51a0f43a548ae8e448667c71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6468a6ec51a0f43a548ae8e448667c71
Size

393KB
MD5

6468a6ec51a0f43a548ae8e448667c71
SHA1

a665530a4990c68e1effa2961aa95f26b4cbc824
SHA256

7b5b97a9c401c30b87e0bb427472dd889866ba0ba9fa46ac75687b35b9aba4d7
SHA512

e2cee03109b71a698a273ffff07572a3910c0bfb1f36d14023a5576eec08eece0bb8d927f530e16a675a9b3143eb5d305b76d21ee762c183ea384c3de0e0874d
SSDEEP

12288:h36wp/Uj5lABDpbbwpSndv+NVUA03EN8p0:h3xJU7sw8A140

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6468a6ec51a0f43a548ae8e448667c71

Files

6468a6ec51a0f43a548ae8e448667c71
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE