96b8cba42e92277f6189844592aa5e8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96b8cba42e92277f6189844592aa5e8b
Size

292KB
MD5

96b8cba42e92277f6189844592aa5e8b
SHA1

efbe485763ad3977e6b27614acc23f85a389e2b5
SHA256

9024b8b47973b8cc68b7861f8d47feae7d79fdd1da9a4fe98f5052a55cd472a5
SHA512

1f12a74e14ca54f0c7ce3a1b1e137c2e446f466ddc853d3f4844532a5fe299b3b66658f36d3e9f8a25d92337104a108e49f8347c167a2b90226e884479de97e7
SSDEEP

6144:QvQ1ZUmnfFE7jv1diMEbi/NuZiAPd1qYWKBLF:hfOjtobiuisqYWyLF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96b8cba42e92277f6189844592aa5e8b

Files

96b8cba42e92277f6189844592aa5e8b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA