bb9c3c4812929263c2d189f914d7fa98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9c3c4812929263c2d189f914d7fa98
Size

356KB
MD5

bb9c3c4812929263c2d189f914d7fa98
SHA1

b514c3b8906cdc93887311621f884ee5de290762
SHA256

d542e4ba841b53f26c7f5722aac276c6aa06aad6e1944fe5484a37e2c41d7cd9
SHA512

05f62d3b26d622db8963af466b5076f927bda528ea18ab80e915c1e2a3a207643ec0d2bc887baa2b936eb26773f5d6a5db247269eb963d48bdb31d68e2851fa0
SSDEEP

6144:x6nhTeNkLvVRhEzutE7fZ9I7Xq25bfiXoPj13GKMUsEu9ySzzetsIjUQF0k5:x6nhJLvVKut8Y7X9lfiXOjBGF7E8vzzk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb9c3c4812929263c2d189f914d7fa98

Files

bb9c3c4812929263c2d189f914d7fa98
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 452KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n-code
Size: 103B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ