963256dcd08a80bfdd03645e310d87e9b23e9ae049bb0b2e1ebe64d427dc5d4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

963256dcd08a80bfdd03645e310d87e9b23e9ae049bb0b2e1ebe64d427dc5d4a
Size

29KB
MD5

868fb83c1a88558243af4c2b565b9277
SHA1

acbbfcd7a8ec6ba2995b31591a16f88065a48222
SHA256

963256dcd08a80bfdd03645e310d87e9b23e9ae049bb0b2e1ebe64d427dc5d4a
SHA512

74245f834712d2ace9f644490da22c33a766a7d85b71b867ab8b4d0887e30dfb02547e8758d7d1c56a5ba028550d59385284ce71026889c3bb1b1b966d3a6f96
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Tr:AEwVs+0jNDY1qi/q3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
963256dcd08a80bfdd03645e310d87e9b23e9ae049bb0b2e1ebe64d427dc5d4a

Files

963256dcd08a80bfdd03645e310d87e9b23e9ae049bb0b2e1ebe64d427dc5d4a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE