bd9ea245702f5b7b7676a9806d4167d9 | Triage

Sharing

General

Target

bd9ea245702f5b7b7676a9806d4167d9
Size

177KB
MD5

bd9ea245702f5b7b7676a9806d4167d9
SHA1

a64c43c702adae5bc2d400f7d322ab66504dd399
SHA256

6be15dfb99d607017067fedcacf51cb79462efa4b01b9417365d3a22252cd895
SHA512

728b98b4ab82e3f2942c399d4146e3be79a874ef384a5d74a37eeaf5720487391164d2669a8d5307da6aa9125e802b56aec059980d6e8ad24f1630181d0920ac
SSDEEP

3072:R29xzP53PWwnzelxEA8rkSDADeak7dJHB/Az7dE:wF/RerEA84SsQLH5AVE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd9ea245702f5b7b7676a9806d4167d9

Files

bd9ea245702f5b7b7676a9806d4167d9
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uuu9
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ