1e9fb5f6b0d641f1eb94ea04b154c55394362771572a6189f8721ee3bb0a6293 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e9fb5f6b0d641f1eb94ea04b154c55394362771572a6189f8721ee3bb0a6293
Size

559KB
MD5

af4705231a7739ed74cea8d4655465b6
SHA1

972007c94be0a192a170ced8601c8f82d3371361
SHA256

1e9fb5f6b0d641f1eb94ea04b154c55394362771572a6189f8721ee3bb0a6293
SHA512

abd1cdfcd64db9604f9848e6851fa2ce809c0da5561b774554add228dbe2f59fabcc3c8fa53d2f5b13f3a91fd1dad32117388a2cae440d39fa3fbd28c5b53179
SSDEEP

6144:IJV10cTrk/mWVqwvzJR6QLW4/ih5ZDyU+FM8cEOkCybEaQRXr9HNdvOalm:Yt+aQa4/cZDy06Okx2LIaU

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e9fb5f6b0d641f1eb94ea04b154c55394362771572a6189f8721ee3bb0a6293

Files

1e9fb5f6b0d641f1eb94ea04b154c55394362771572a6189f8721ee3bb0a6293
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 268KB - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE