c1bbf4e4fa0d98ba92c75ece091067a8 | Triage

Sharing

General

Target

c1bbf4e4fa0d98ba92c75ece091067a8
Size

652KB
MD5

c1bbf4e4fa0d98ba92c75ece091067a8
SHA1

52796b1df5cfeae8b4155d96b1420e58ea88f100
SHA256

45a42bf2a45407a5a1a20020c5aa2841dd0306f8c9c1b0e2d2e83c86d7e948f5
SHA512

22ec517925d7bd64cc2bad192ec288afac455b13a172a0b6776fdda3e0b2c085e53cb614e09a2d858964ad8c58172713d0151b782f5919b38023701425417e18
SSDEEP

12288:yBRqe0USrDmg2vVrUD85/GMeWuq/Sp5vT4ERnyhi/FaI0zZbl+08kDtVQb0OyY:yBRqe0U0SNoY+Lq/SzT/hNYZbl9Dry

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1bbf4e4fa0d98ba92c75ece091067a8

Files

c1bbf4e4fa0d98ba92c75ece091067a8
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE