7178da9dd4306bb0a69e140a783dea34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7178da9dd4306bb0a69e140a783dea34
Size

27KB
MD5

7178da9dd4306bb0a69e140a783dea34
SHA1

c6483554e74a74641edfcb442f44092cc0ccc296
SHA256

37ce9407c45e5392c6c514d4e352b4d5a3ebf9472c9e3018277b8e844018a96d
SHA512

636739ee0a7f0b9a9352b398d52a9fbb7cde54e0880e253c30ab57df8d8a520fcd9d4cfb5c71d4224d33b32bf70110e075aed216293b8c85d7ce6a910726719c
SSDEEP

192:DvxJqAPhpeS1ZK4O3CDHLLlzMZl4vl10GPdYPmVI+tTpXXXcEukUqU4ubvRxKc:FUAPk2MZlm5P6d+tTZcS64uFQc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7178da9dd4306bb0a69e140a783dea34

Files

7178da9dd4306bb0a69e140a783dea34
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE