afba3b71bd4a20b14426f2f27648844917814e15048f3075eefccef2a0a08d2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afba3b71bd4a20b14426f2f27648844917814e15048f3075eefccef2a0a08d2a
Size

174KB
MD5

ecb712a6cab23de4277aad928d6debf1
SHA1

0b64f2d94e9a534485f76591e5a8f21bc491a121
SHA256

afba3b71bd4a20b14426f2f27648844917814e15048f3075eefccef2a0a08d2a
SHA512

543a35341924d61edfc36b8bdd5de32fd431a88389c805395bfd8269ece4fd2eb79ddf3f75fbcd9ca1664f6d3d28b0569b15f28d11415b1102366c68e8a966fe
SSDEEP

3072:SxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvdqkzk6t5XtULVc:U2pdqfv2IPOGfXf5ovWvdNk6rXSJc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afba3b71bd4a20b14426f2f27648844917814e15048f3075eefccef2a0a08d2a

Files

afba3b71bd4a20b14426f2f27648844917814e15048f3075eefccef2a0a08d2a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE