7c4bbe6dfb0fdcea4410e3a5113c9e6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c4bbe6dfb0fdcea4410e3a5113c9e6b
Size

344KB
MD5

7c4bbe6dfb0fdcea4410e3a5113c9e6b
SHA1

391141803ca7cf36fd798f9cc43dc656cec138d5
SHA256

09c6fad1322a2a8edb68e7a2a818e0df796c1fa665d3e8e6a3326f0f9a21bfab
SHA512

3e1be97f6d8bfa87bb551a76a96ad8c6c165501d7a78b30a2be77bd94d52c697c5c6c941ef4609f99154ece8543757c06e1a5fdd5d3cdc026af42f8b99ed48c5
SSDEEP

6144:7ZHMhE/P7okDD+USMK3aGjOQ5Gr6pPd84m0Kt8H0cVn0hfXluzG6ru1u:lHM23BlCnjORr6upfcVn0hNuCZ1u

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c4bbe6dfb0fdcea4410e3a5113c9e6b

Files

7c4bbe6dfb0fdcea4410e3a5113c9e6b
.exe windows:4 windows x86 arch:x86

647b2d25b4821905b4195ff7a6455b54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

UPX0
Size: 512B - Virtual size: 600KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 342KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE