c290b7987035d88343912563be8b1656 | Triage

Sharing

General

Target

c290b7987035d88343912563be8b1656
Size

2.6MB
MD5

c290b7987035d88343912563be8b1656
SHA1

54b43a2f2b7d502e02010ae4c7e1a5b6e0104615
SHA256

a7ce6da8d41dd251421d5ec383b72898d34ef847444c8382dc66a38c6fb3ef0c
SHA512

5d64c1d7429e9bf5602301c850c2467ce2b9064f64a9d254a436524ea5ffd6de905832e8030724668cae224a9b343253413e181ee0844607c92e088d964a5751
SSDEEP

49152:TA22cXf+sCHiEfBn2I/OwPCkpv7MbTdyvd30L0yJMWSPv8:TA2f+QEZNlCMvQTdDIyOW+v8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c290b7987035d88343912563be8b1656

Files

c290b7987035d88343912563be8b1656
.exe windows:8 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 480KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 939KB - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ