7615e0da659367be9cdffdd1624ac6e6 | Triage

Sharing

General

Target

7615e0da659367be9cdffdd1624ac6e6
Size

1.0MB
MD5

7615e0da659367be9cdffdd1624ac6e6
SHA1

20315cb40e47949eea4cf42bb3fdd97931394777
SHA256

11550518b1075562f6c41db20ac2508f1db874cfa86072e4f77384aebccc9a1b
SHA512

ba69ac4c360eadadae1db4e884258f9636247a71505f9d1ae3b6d8d03da5b5807965062a64050f1604be613c4978420193663c392fea271d9f7b2d7ceb6e51e8
SSDEEP

24576:h6KtbAArSO836Or8FkkMqfmP5hnubTxkkOI+xP1/ih/r5:9CdjYTMq+P5h8EI+xPFI1

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7615e0da659367be9cdffdd1624ac6e6

Files

7615e0da659367be9cdffdd1624ac6e6
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 472KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 907KB - Virtual size: 908KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ