98bd10b23db090f4641fa20b3c43292a | Triage

Sharing

General

Target

98bd10b23db090f4641fa20b3c43292a
Size

250KB
MD5

98bd10b23db090f4641fa20b3c43292a
SHA1

aaf0a7e5b336ba64defe07a157f989b934b41e15
SHA256

cf2f3da7be9f3f9421b592945b2c995725286c199b4fa342746a39cdb3e98222
SHA512

069f331a19b350086eeb84e9bfb1e9c2f8d84d025c4cd5916dcfa348347dfc0fbffc8603a95d16aa709eba3a439748324d259d7f2be45e49e4461773fadd83a0
SSDEEP

6144:GOw+GaP7Wz1ZdZEi+GLfeO31xVM2/xPSm22oPZXkKX:z1C/TEi+nO31o2/xK72ynX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98bd10b23db090f4641fa20b3c43292a

Files

98bd10b23db090f4641fa20b3c43292a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 428KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XOR
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE