83e4eba749511c6951eea406ca2870af622943e79fb0cd79bfd1f20de5d0c44c | Triage

Sharing

General

Target

83e4eba749511c6951eea406ca2870af622943e79fb0cd79bfd1f20de5d0c44c
Size

99KB
MD5

dce1dee9ab8212bbcd7d51973c03d294
SHA1

f5da166f114b56f267eb2281b0e5661d4eae8472
SHA256

83e4eba749511c6951eea406ca2870af622943e79fb0cd79bfd1f20de5d0c44c
SHA512

c5849882ac5004a4141e4b3e074827ed6d1d120f89d0ca4d853d56720dcf1a732ee9a414d1b954b78462afba1bc14b7d29a0c9925c84d7a148ee30e88efd22dd
SSDEEP

768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyA:CzqsQ5PIt4+/yfeB6r6YcOik5h36lb

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83e4eba749511c6951eea406ca2870af622943e79fb0cd79bfd1f20de5d0c44c

Files

83e4eba749511c6951eea406ca2870af622943e79fb0cd79bfd1f20de5d0c44c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE