8900a924248194af53d79ae4313dee0f | Triage

Sharing

General

Target

8900a924248194af53d79ae4313dee0f
Size

947KB
MD5

8900a924248194af53d79ae4313dee0f
SHA1

ed389d5a6b44326112121a3b637737129b08c41f
SHA256

16367ceb1e389ab425b5644125cecace3920a091a9c638c143a8b181050e89d8
SHA512

f479ca8454196c9e488fa66b466e28acc4a1509c7d75d5ce4685d660c39c4a8341e968a98f34d3dec85f70ec4c960e39bc51f7b083107a536c41430a601bfbce
SSDEEP

24576:ZAUw6vLU7PAQVh6ONOaGnNO40g3az+hEpcR:2b71h6ONCEaY+R

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8900a924248194af53d79ae4313dee0f

Files

8900a924248194af53d79ae4313dee0f
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.jxmnr
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.exjvk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lpkez
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ