8fb7be353f3a97b38628d9ded96f3b21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fb7be353f3a97b38628d9ded96f3b21
Size

1.9MB
MD5

8fb7be353f3a97b38628d9ded96f3b21
SHA1

1ea33e9bf6cbb1a497addcdfbeb40c41c4d4e6a8
SHA256

24957ae35dab4b4eb470ef5c2a1b8240906df1da64f4eeb281744dd26b26f044
SHA512

0b52fd712259795cdcc060510ec6b4d67e79cf74c6e240f0aff7a68936d9d46f7db9565d0713ea410869e7363a3b0fa46d8cec0d73c54f49b8d959bcb2b0aee0
SSDEEP

49152:nf6Lp+fWcn7C/syUrIXdWve4DINsBniKpfKynky0lu:nyLp+fWs7aEsXdWW4ZBbncu

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb7be353f3a97b38628d9ded96f3b21

Files

8fb7be353f3a97b38628d9ded96f3b21
.exe windows:8 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ