65068048f06a4058e5a12285c3b86909 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65068048f06a4058e5a12285c3b86909
Size

992KB
MD5

65068048f06a4058e5a12285c3b86909
SHA1

af62a82181bd65755814497936a28393b37ae459
SHA256

2d6e4daf354b49fd64129079ab0d4ba36adc797a7a16b9593c905f51898e8cfe
SHA512

2bd329e56a56271894e23207149c81b10ac7d0c183d650aaea71b853b077ae7b82584a984be94e1968731d5de4e2f79070399d7b9c8b1491af3bb6b6107a0f2b
SSDEEP

1536:tZskId5+yrrjGczP54ghmB6qAID8sq/2zX5h3rG3mE/OKzpRWDYsxJC+ut7M3Efe:7VAjGcN1gv/DFi2r5BtE/OKQdAi3E

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65068048f06a4058e5a12285c3b86909

Files

65068048f06a4058e5a12285c3b86909
.exe windows:5 windows

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 39KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE