37462de70fc47d8818f538b07d21ffc4b271614d210e0f92d32c7a30ca0e2134 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37462de70fc47d8818f538b07d21ffc4b271614d210e0f92d32c7a30ca0e2134
Size

448KB
MD5

b92ea87ec2576a05093e863402d1c311
SHA1

2d907fc3a73b00276faa190cb176d6d74347cee7
SHA256

37462de70fc47d8818f538b07d21ffc4b271614d210e0f92d32c7a30ca0e2134
SHA512

41a883a35e3989f005b92e29ffd085e9d91fa29a791e41acc508622effc3a807745b835cc684931c8ce68df6c4db9cd92108243739d929fde8ba3656a097d498
SSDEEP

6144:8kLYyvZFsjpHQvXrlHyJzVJot3aERiLTwEYYxNdZl:8kLYyourOWaE0TGYZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37462de70fc47d8818f538b07d21ffc4b271614d210e0f92d32c7a30ca0e2134

Files

37462de70fc47d8818f538b07d21ffc4b271614d210e0f92d32c7a30ca0e2134
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 216KB - Virtual size: 216KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE