c68a80f4f75ec7cc513d3f09ef15308f | Triage

Sharing

General

Target

c68a80f4f75ec7cc513d3f09ef15308f
Size

5.0MB
MD5

c68a80f4f75ec7cc513d3f09ef15308f
SHA1

2a9b9914699d6804a62475d0bfcf0c15470138f8
SHA256

a12da3fb5b4669fdc00dff5408b20f9848081330eb62e1c5cb4379dd57df8f3d
SHA512

303bd12b4a778a246efdbd1bef13ddd0666d0e34c693486209d6754dabe433f0b00de3fde484fe44f731186a053febe87ec8ee069343d47cff69acc7d6aca488
SSDEEP

98304:SzST2ydmhjrSvZWVPjYMMIeke9Vyz47zu5PiAXrOWo3I33P2f93xN5YhA:SzST2mwSvZWVPjY6kqaACWo6Pm9f5KA

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c68a80f4f75ec7cc513d3f09ef15308f

Files

c68a80f4f75ec7cc513d3f09ef15308f
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 568KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1014KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ