a16c972d094318c4f9cc6e9550daeb53 | Triage

Sharing

General

Target

a16c972d094318c4f9cc6e9550daeb53
Size

516KB
MD5

a16c972d094318c4f9cc6e9550daeb53
SHA1

02d5f9d5274257ab20ac6a657135f7248db50916
SHA256

505f6f1e7b1fcc12646a2a569dd31f6af4d05fee8109b8541c466b05fc6d94ad
SHA512

0ec6737a0524a3fa68b736c14f06092516dc787ae9870f6264019a807749ad8deaa11bfbceb71bd83f949e74f34828242685df46b28f60c812746e4508ee0dc2
SSDEEP

12288:hwsebt1Yw1s2zn0gMljRJz5YF4uvctghYxGDHCt2BeFOoS:BeIw1Tzn07/Jt2BND+2w

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a16c972d094318c4f9cc6e9550daeb53

Files

a16c972d094318c4f9cc6e9550daeb53
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?AfxGetMacAddress@@YA?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV12@@Z
?AfxPrintAllMacList@@YAXXZ
?CalcFileMD5@@YAHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAV12@@Z
?CalcStringMD5@@YA?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V12@@Z
?base64_decode@@YAHPBDPAX@Z
?base64_encode@@YAHPBXHPAPAD@Z

Sections

UPX0
Size: - Virtual size: 924KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 510KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE