c7e8862df0177cc3214f4efee4ef0c64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7e8862df0177cc3214f4efee4ef0c64
Size

204KB
MD5

c7e8862df0177cc3214f4efee4ef0c64
SHA1

2b3f60c1b4dbb273d7f1c51e0774cb00858019cf
SHA256

2a3e2dbe3a3b744aa79ed32587d34ab68ff3150454e5cd96a2944abccf896b9b
SHA512

cebaafa64b118468cbbeff105fd6eb6f9f75b4da57a77c657770a7a9c2d50767d62937ca17fabeccb31d0a017e7da5703f4539146829a2cb1f4f2f47712663b7
SSDEEP

6144:YjluQoStIo5R4nM/40yJny+xQ2ISUumKtXK8Ew73s:YEQoSnqhnnK0VmKAXas

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7e8862df0177cc3214f4efee4ef0c64

Files

c7e8862df0177cc3214f4efee4ef0c64
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ktlju
Size: 4KB - Virtual size: 4KB

.wu
Size: 512B - Virtual size: 4KB