d60ebd523850aa89d7f838d1f655b1fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d60ebd523850aa89d7f838d1f655b1fc
Size

298KB
MD5

d60ebd523850aa89d7f838d1f655b1fc
SHA1

09cae53a4ed3ed0b58358bf64b8672b4afa5c6b2
SHA256

c185283aec947c144cd56184110d7fad21d5da29b45f1bfa1f885e5227201d2d
SHA512

16384d05df0cb3cae54211119a54679be70b3f4818eb4f39504b221c4c7d717b2b5c91b04737e295f5b66627e7be18a2cc4d4e1267721898e5d911c1a9daa899
SSDEEP

6144:0npJag0P6rLGdDyw53Y+cxWTCTCCukalSWe20g3PgKyEX+l+S:0mBDywe2MCCUSp2NoKya++S

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d60ebd523850aa89d7f838d1f655b1fc

Files

d60ebd523850aa89d7f838d1f655b1fc
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 376KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 291KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.test
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE