cc74b7906282fa645ad562dc332017a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc74b7906282fa645ad562dc332017a1
Size

391KB
MD5

cc74b7906282fa645ad562dc332017a1
SHA1

bd2d803818f9b339d82eaeba20e325049123592a
SHA256

dc63b2e7bcaf27f145404aea7f05eb37977d056dec4580dc3b50b3bd2d88a8d8
SHA512

bf703f1c23dba2b04238a0916a64ef1e13a0c355368551156cbeb8ec958ff3ac04661f0b525d1d205fa381a0d266933c1893c0367a43a304160326972e723583
SSDEEP

6144:yRQLMdUwXoJHvfMgFlbZpGq66Bx9rd6IgYPc8yu8/yP4HjWejW:yPjXoxlF8q6CAIs5/yP4Hi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc74b7906282fa645ad562dc332017a1

Files

cc74b7906282fa645ad562dc332017a1
.exe windows:4 windows x86 arch:x86

647b2d25b4821905b4195ff7a6455b54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

UPX0
Size: 512B - Virtual size: 716KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 389KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE