880cdbb9da099dee6900c8079b83424a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

880cdbb9da099dee6900c8079b83424a
Size

102KB
MD5

880cdbb9da099dee6900c8079b83424a
SHA1

463a8ffb89996293e2556c8b97f8a853cc1ffc17
SHA256

fc16f013d3bb4268cad6aef447c47c2bdf2ca09a6d570e6743ab5cfab1031997
SHA512

ea9e111f628295ce097b87a86485f563239495e0c68d53708fd9d537ff9dba59df18dd8d5d6f2a579c96fa9bb52167636fa6b799222302b7123424a803be8d36
SSDEEP

3072:tlnBz/m4zvKW2NXUF71YG9QCXZgCc9N63M7:PnUmvr4kIGNb3M7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880cdbb9da099dee6900c8079b83424a

Files

880cdbb9da099dee6900c8079b83424a
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE