General
-
Target
f2bbd3321ff53ba6ff46d9e4758d1721fd3fd0b70b1984a7918f3324e8b80255
-
Size
94KB
-
MD5
fa561f5076f3425f1d910882f7096bc1
-
SHA1
aa6e59d89ca18465328f2a9dfe534d8ce1a87b57
-
SHA256
f2bbd3321ff53ba6ff46d9e4758d1721fd3fd0b70b1984a7918f3324e8b80255
-
SHA512
a64a0cb7b51937bc47486d91911ccf453dd44a02897d5ccc5113beaa8f14f4d1efc9ce25e8fce9e4b477d2d26ce949a315d51fbf6f09a30954a6461c5244d384
-
SSDEEP
1536:GvQBeOGtrYS3srx93UBWfwC6Ggnouy8STCRBHkOl0JnSLa:GhOmTsF93UYfwC6GIoutXBO/
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2bbd3321ff53ba6ff46d9e4758d1721fd3fd0b70b1984a7918f3324e8b80255
Files
-
f2bbd3321ff53ba6ff46d9e4758d1721fd3fd0b70b1984a7918f3324e8b80255.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE