cebdab133fe5a481ad724d058af2100a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cebdab133fe5a481ad724d058af2100a
Size

87KB
MD5

cebdab133fe5a481ad724d058af2100a
SHA1

5a57ad5ae191e9280fbd02ed89e634e993a136b3
SHA256

a603569fae13a00b16af096d27cb778bb551710a6b19e8ac1b550e4eb45c20af
SHA512

ed1732a425c2ca6465a91618634ac36b0029dc5ed1adef40d5a0e45e1ee409c81e8c08f57b48b376b80e126777e9c525cf52cff77606b9b064218b0c33ec2c36
SSDEEP

1536:DFJz/vArEqF8F1DXE2HCIkjDL6jlTJV1Ayj4m/QWR/Rlq88vlnRqPR/1aViXVmDi:Dvs4dDXEGCLElz1Tj4mYWR/R4nkPR/1N

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cebdab133fe5a481ad724d058af2100a

Files

cebdab133fe5a481ad724d058af2100a
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bvxzt
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yno
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vzkj
Size: 512B - Virtual size: 4KB

.kemyz
Size: 512B - Virtual size: 4KB