651aaffe54fe231bf87eda4000fa33e2e31a6d77530d528bb308b74e33196a6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

651aaffe54fe231bf87eda4000fa33e2e31a6d77530d528bb308b74e33196a6c
Size

8.7MB
MD5

92e3a0ba9749946afe290040a16a24ca
SHA1

43c36751d73b3b8ae6017a38d5527f8987697425
SHA256

651aaffe54fe231bf87eda4000fa33e2e31a6d77530d528bb308b74e33196a6c
SHA512

03f01017544d17180d47bf7cc8e0c5c8c115526500574fabda2753f7c643c22ae2596d1bbd18c9296e831951ff0ac17c397c54d9d9b581a6fe49be4c1df1f4fc
SSDEEP

49152:3VTGY82VQpX73vfvcQFVQ4DXCpKlOLhpxcFCUSGuxUFEt0iO9ZGJAGVfX:FUpg2VQ4D2SkjxcgUuxkw49ZGXl

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
651aaffe54fe231bf87eda4000fa33e2e31a6d77530d528bb308b74e33196a6c

Files

651aaffe54fe231bf87eda4000fa33e2e31a6d77530d528bb308b74e33196a6c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE