be849635df5e348a70b9d543f941f3d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be849635df5e348a70b9d543f941f3d2
Size

238KB
MD5

be849635df5e348a70b9d543f941f3d2
SHA1

d3a01795d0bf751c1d5911eba2423457b7c90d3a
SHA256

78538a04aaf6567540f87d9184e1c5dbdb086a0067ad1d2d627621847ad65ec9
SHA512

3615263cfd77ee8634f958bda05d601a9fd323969726a18db601b66a56a61ba9f5988dd708c99461926bf6e629737b2db13ebe5cfba9f0556b7eb2f765c5497e
SSDEEP

6144:ZTJTJwViYomGmVYaeqf3l/LCH88bhg/fj3gj:NJJOVOm6aXd/qkkj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be849635df5e348a70b9d543f941f3d2

Files

be849635df5e348a70b9d543f941f3d2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 348KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE