ad4cfff68a0a884bff9965150b94c54c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4cfff68a0a884bff9965150b94c54c
Size

116KB
MD5

ad4cfff68a0a884bff9965150b94c54c
SHA1

01a1643f93528e8dafc0df5bed00e4f4c3eb4921
SHA256

98ff97c29d98ea744cd3945f974b77b4d9732d0c658c181193390b1fa125d326
SHA512

bbc6f0f5bc554332cb3b3a8c81c79f3459bab555f0c798d3023203c6d0dfc1209a42428204133cb7c5502fa3ace80db8e895769ea91547f5d3a53fff76b9ea3a
SSDEEP

3072:SKcWmjRrz3nc2Dq9ml6TuD5x0jx9isxIFLXgh:hGndEuVxm9iBE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4cfff68a0a884bff9965150b94c54c

Files

ad4cfff68a0a884bff9965150b94c54c
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE