349a4f453607a2e499e50a1fac32d2fa364c8a1ee8358be6a32ffa5fe47a4677 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

349a4f453607a2e499e50a1fac32d2fa364c8a1ee8358be6a32ffa5fe47a4677
Size

5.7MB
MD5

7fe3e063d1a7beff09cb21ba3fdf2684
SHA1

396ae174f85433357f90ae7e1cebc045dfe88782
SHA256

349a4f453607a2e499e50a1fac32d2fa364c8a1ee8358be6a32ffa5fe47a4677
SHA512

9e24de4a31cb8eb78c780106e224df4380627a6ab3827b8773e680c1a1f04ea675d27c5f29d0693141c0f1926494b4973a32a804bee595c23a8327d7fbda5ec1
SSDEEP

98304:npy0BDCugmPuXatqShv6/poIybjB5qAr+mUgqW:nfDCq9tqSSpwbjB5+76

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
349a4f453607a2e499e50a1fac32d2fa364c8a1ee8358be6a32ffa5fe47a4677

Files

349a4f453607a2e499e50a1fac32d2fa364c8a1ee8358be6a32ffa5fe47a4677
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 1.9MB - Virtual size: 21.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 734KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE