e31af14e2b70effd6b5e4f88f11a305e69460a518c8c86effbf2b422a2d48547 | Triage

Sharing

General

Target

e31af14e2b70effd6b5e4f88f11a305e69460a518c8c86effbf2b422a2d48547
Size

239KB
MD5

996dd62bf084897eb2a4d30a9a666f59
SHA1

21d08d5152cbc53809f4e5dc5d203cb911976ae8
SHA256

e31af14e2b70effd6b5e4f88f11a305e69460a518c8c86effbf2b422a2d48547
SHA512

21f8ede4f144fbd3005875fc1a1d56a7a22244084d9dd9ad014a0ca6f637b76a459c6a3b6e8e48c54671a1fa8bc673634a47eb03d8a8d8df18bb5de42478c2ef
SSDEEP

6144:xbKif9ZjWcmUUa2jn2FLjzbcwfSZ4sXSzQI6FU:BhFZMhjnWjzwwFEI6W

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e31af14e2b70effd6b5e4f88f11a305e69460a518c8c86effbf2b422a2d48547

Files

e31af14e2b70effd6b5e4f88f11a305e69460a518c8c86effbf2b422a2d48547
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE