95b4c896fe06d02c484c3fd3371eb668 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95b4c896fe06d02c484c3fd3371eb668
Size

279KB
MD5

95b4c896fe06d02c484c3fd3371eb668
SHA1

1f4be0f7aa7ad81df9f39527969c9c9845225f86
SHA256

1222d3437fc373c56902251b7911fc684d8f944ba3b93a535f1c7348d3d483d6
SHA512

49b055ae916165187035a30242608b0aa919cabc09e2d49e28232ea1142d8141767c90bd879e9dcbd8e08b6321a370447d2d48e69ce62f4aa99c24f03b293995
SSDEEP

6144:+MfY1c2cdaXWXVgbMwPrZMCuM8K/4VklyC20LDFR8AKekoQf29e1UKtZl:TEcdaXWXVgMwjZMbMz/4WZtKz6gZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95b4c896fe06d02c484c3fd3371eb668

Files

95b4c896fe06d02c484c3fd3371eb668
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 56B - Virtual size: 56B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ