b7c32da2a71821be470a7a97ccb08af2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7c32da2a71821be470a7a97ccb08af2
Size

249KB
MD5

b7c32da2a71821be470a7a97ccb08af2
SHA1

97ad6a5a16323ff531d8eef5b6f922fb812caf0b
SHA256

6c641c14e25e85ff92366dafdf8dc64a62f5327327071d8cde5c8714714dcc29
SHA512

36de8ebc478879602548f1f97fa7464e9d8f89048f6d945378ffaf385c19457860e85c6fac50f785e7afb73bf031d3a101181f8580ced73c643a5aaebbf64127
SSDEEP

6144:fBacNNrsKHKkyo7cHPIZ6vfWnKIhParq/yu3y4JTzMj5Spi:AcNNYwKx0cnEBBaWyP0TAjopi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c32da2a71821be470a7a97ccb08af2

Files

b7c32da2a71821be470a7a97ccb08af2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TUPX1
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE