48e8579ed3e10940f1ba02ee612966853a2ad6ca5f79dea32ef7394e7f167aae[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e8579ed3e10940f1ba02ee612966853a2ad6ca5f79dea32ef7394e7f167aae.exe
Size

493KB
MD5

d3466d3503d830cccdc003917572b7fc
SHA1

e833cf4cab6182e8ba9fd32b6473e70d7c5f9356
SHA256

48e8579ed3e10940f1ba02ee612966853a2ad6ca5f79dea32ef7394e7f167aae
SHA512

b6cf49d1be6f2aa0f66fd7f31ddf6987fbe7bc58e828a388cd8685d75f43127e5143dec09402bdc05a69b3a9aa0e8e780c6e18eb5788afc73b35450016b12003
SSDEEP

12288:5Q00xudI+rro5jTpiGYC94gNuSLlp1td+nKSUyCib:AMO+rrEViGr94WLlp1L+KvyC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
48e8579ed3e10940f1ba02ee612966853a2ad6ca5f79dea32ef7394e7f167aae.exe
unpack001/out.upx

Files

48e8579ed3e10940f1ba02ee612966853a2ad6ca5f79dea32ef7394e7f167aae.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 704KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ