abfc178fd3012040912bac75876ab7cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abfc178fd3012040912bac75876ab7cc
Size

431KB
MD5

abfc178fd3012040912bac75876ab7cc
SHA1

020b0574f6bc419e79bb7f535dc9a00e265dc228
SHA256

3158d301214c62d218b6721a0addcc44661ec2d2d2aaebe529ef4324ef8f966f
SHA512

db4073fe74e184e9ba1a1e14c00ae36338e1887e16feab59586000ebf79e45e99a734b88485da778731e06f26c1b604cc56839b98a27b5e76a0d34443781134c
SSDEEP

12288:LjkArEN249AyE/rbaMct4bO2/VuCsHkIiFVlIW:AFE//Tct4bOsY8FrIW

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abfc178fd3012040912bac75876ab7cc

Files

abfc178fd3012040912bac75876ab7cc
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ultra
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ