a06e4ec17b9db82975c2607712d995a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a06e4ec17b9db82975c2607712d995a9
Size

4.3MB
MD5

a06e4ec17b9db82975c2607712d995a9
SHA1

79e057228bc8c3dc08e113ae81996e5e7123f053
SHA256

e026b6f50841248ffb4f7ed0b9f14040e02ec46fded72fa1b6864423be410252
SHA512

6b35c7f246d15f2c8595d26e6a2f5584694662414b3b5566da761e4d30878739eb7ae7f65b8ea7a917c9b3356e5627fb03dfc40a2006f6d7ca3fc21727fc7220
SSDEEP

98304:QKLYuWdicN5Yzw062RyNjrUpqGEUUdJL97d95UrCj+zG:QKLYuWccnYz0YChn57p

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a06e4ec17b9db82975c2607712d995a9

Files

a06e4ec17b9db82975c2607712d995a9
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 414KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VS
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ