ca6b714863a70237e338cb5c48fe813c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca6b714863a70237e338cb5c48fe813c
Size

94KB
MD5

ca6b714863a70237e338cb5c48fe813c
SHA1

bafeeef90240455a1acf492640061a1d5217a351
SHA256

d4b4d457df9b602e477f00fd0b94caf32d783720aa9e66859cf80747b0d99560
SHA512

0a0fc4a975e9366368c2cdec4342fc0a29cf8236d52b035808992d195158db0e27d619c1e458ec1137eba37da9fa362751de8d89affad9c95473a4d5709c36d4
SSDEEP

768:F5k/xjk9vnjd3dRW0pcDZlMYvszsNwWon4/lh+Fl51jWEqTB0HZaiNaFEVldLMwx:w/xeTpcDZlTgcwWyszTGHUiNa2ku

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca6b714863a70237e338cb5c48fe813c

Files

ca6b714863a70237e338cb5c48fe813c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dswlab
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE