7f4561ef595226beb1b740bf6f736efccf5d3d02743737b88e3703c3f64a0e76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f4561ef595226beb1b740bf6f736efccf5d3d02743737b88e3703c3f64a0e76
Size

260KB
MD5

57cacdfe9d1931cdbfa7c00722f354de
SHA1

3071c91fccdc730a3f55979698c3fea1fd856931
SHA256

7f4561ef595226beb1b740bf6f736efccf5d3d02743737b88e3703c3f64a0e76
SHA512

62528dee2d41121a83115e0fcdf99a0d8c2f576de36cc52317df94489af25f3aa74fd182a407271daa1e8ce6d0e89547ba184873a178f0ab7906c02efd663f4a
SSDEEP

3072:PU5kYlj1i2KCsvJrp77bLeBdVw9+TpFLMHb+FHzGs:yCrp7Aa8z0gG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f4561ef595226beb1b740bf6f736efccf5d3d02743737b88e3703c3f64a0e76

Files

7f4561ef595226beb1b740bf6f736efccf5d3d02743737b88e3703c3f64a0e76
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 113KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE