8c24dc3d0f45ed988a36c66d7f47388d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c24dc3d0f45ed988a36c66d7f47388d
Size

36KB
MD5

8c24dc3d0f45ed988a36c66d7f47388d
SHA1

9b55056ee6b8f6a7d5415632ce6a0eae8b07577a
SHA256

1b966df42425ac5dc40d38ba1b9ef54930146c94d4b98f913216408e124e082b
SHA512

883d5c440430e9451b542aafb0b6a3e675903949cf868ebc747df85a4f58846f776738495221819f7554202921a656d428a83ed641813b0620e403655c44e1c1
SSDEEP

384:fDvtX1adySwAjTk0sOC77T5MWmzrNgGstt19Upuo6bvYqvsOb4ZcgNTDr/zWhCny:5Fz5oBK9mfvyBhyZcwbz94nR

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c24dc3d0f45ed988a36c66d7f47388d

Files

8c24dc3d0f45ed988a36c66d7f47388d
.exe windows:4 windows

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE