VirusShare-01375020612a301847e34d2368e5cd5f | Triage

Sharing

General

Target

VirusShare-01375020612a301847e34d2368e5cd5f
Size

1.2MB
MD5

01375020612a301847e34d2368e5cd5f
SHA1

6a9ba2fd5a74b181437c5da45abd978da16a3c62
SHA256

bd0a26df417a3893621ba47a258d2da12976604ff891f99b7da25f950c8f3619
SHA512

508fe4df589c396eec73e1067dfe9a2cabd48f5bb3a73b2760c762d67854c52d16b584c8e66651a7d8f6425fc6486aa416d1f1ce506f09a7d3319a3b23ed0202
SSDEEP

3072:YChTOOszQ5drGmxeUwm2v2ZCRvljBk0IVB9u02Fk:R5Ps851GmoUwm2v2ZkvpBG1Wk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VirusShare-01375020612a301847e34d2368e5cd5f

Files

VirusShare-01375020612a301847e34d2368e5cd5f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Getconn@Finalize
@@Getconn@Initialize
@@Mailutil@Finalize
@@Mailutil@Initialize
@@Smtp@Finalize
@@Smtp@Initialize
__GetExceptDLLinfo
___CPPdebugHook

Sections

UPX0
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE