8bf18e840716f21c46a59587ab226012 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bf18e840716f21c46a59587ab226012
Size

97KB
MD5

8bf18e840716f21c46a59587ab226012
SHA1

b500fcae9c0e45d67644a7cf20a414200829eb91
SHA256

09cde91507efe98b022d9a1ecefa1df5cfbb2ce4eab8acdb38a2835f7a84d168
SHA512

2cc5447b2ee54b27d4c6facfb4a07a1ea25fb67d181ec8f369f9fa0f2e371f74eda3bdad2a67483b0f087128322cd05b310119e0e977a2c3c04f43ea78e33a88
SSDEEP

3072:SKcWmjRrz3al0yMzBMYpF+vTH8RDrLkyFBg:hGv0M39bg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bf18e840716f21c46a59587ab226012

Files

8bf18e840716f21c46a59587ab226012
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE