8e8474fab0eb66d78a3a87e03496a437 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e8474fab0eb66d78a3a87e03496a437
Size

2.4MB
MD5

8e8474fab0eb66d78a3a87e03496a437
SHA1

e91ad630e503d753b01b80e865112ee901352787
SHA256

3b70841781c53de790b0cf8a2b858f00d8acd8af0ef9c1d6a4dbf2d947a4ff52
SHA512

2cc113eef67506643a7408e1b73773cee4df479d7d88ae903a62b334a370d30b99cf34f8e13bbcce4974bef140a54e47d57c05026964ec8084954c427b1ef382
SSDEEP

24576:ms4JvTID/alvh7eJY9uvf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYK1c:mjTblvhCWe+s8KuqGaX0ToIBAUZLYkc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e8474fab0eb66d78a3a87e03496a437

Files

8e8474fab0eb66d78a3a87e03496a437
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 950KB - Virtual size: 952KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE