14a3aba0df4a2849ca18e510adf01410 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a3aba0df4a2849ca18e510adf01410
Size

97KB
MD5

14a3aba0df4a2849ca18e510adf01410
SHA1

97972e4d26364ad6c572097ebb152dbcc3b8c3f0
SHA256

050b6a0378e1ca4cc75c6bb43484cd08851370700a9d2b5cb030a31c6941ea01
SHA512

8d10c7ba335a6688761f1fd70b49059aec055b0c6ccf7b0195ca205dce4b79cc02ade9dc2090f7152a30308bc1be5ffacfd22bf4accb3c924dce82992c617f19
SSDEEP

768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5foDz:CzqsQ5PIt4+/yfeB6r6YcOik5MnXD

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a3aba0df4a2849ca18e510adf01410

Files

14a3aba0df4a2849ca18e510adf01410
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE