73772f570f70ecb6c9eddcd530bf3329 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73772f570f70ecb6c9eddcd530bf3329
Size

780KB
MD5

73772f570f70ecb6c9eddcd530bf3329
SHA1

50a6f972fd7701f7fb889da0497ba7ebfe5a5735
SHA256

daf1c92c4cf51f67170f120933ebfc2e952376a2f755e6ba9a65a72800c21bb1
SHA512

9485b35152c22533e76898a1361ae91a0c5323c81bb5a69c8eec08f1dcf4ddaa2a45179789581b0bd0e22be19804988de34b2c08a6a103fc5dd709fba2f31fcc
SSDEEP

6144:HOZ94q+l5gm4Qk6XqAsM1hZ7VtO4n8z9nOg48nS4cv3Js+0X:uZ92l5gmy6BfxjO4n8zhSr30

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73772f570f70ecb6c9eddcd530bf3329

Files

73772f570f70ecb6c9eddcd530bf3329
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE