a7d0eeff4cc8a6f8f9ae93e8f879db7b1a40bf21fa5df679d330f3538352e34d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7d0eeff4cc8a6f8f9ae93e8f879db7b1a40bf21fa5df679d330f3538352e34d
Size

41KB
MD5

1aa710ad838680e06875a9cd72460266
SHA1

1984f0436ef36a0066048d0039dff1c3d20e0419
SHA256

a7d0eeff4cc8a6f8f9ae93e8f879db7b1a40bf21fa5df679d330f3538352e34d
SHA512

2cc89461a9b08beb6c6a5977e27d436eaf09245b251588b126694d3cac9ae0dfc498b0ea6c9b4c6def4940896d41e879740fb5093ab03a1893d70d04a801b8ca
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/O:AEwVs+0jNDY1qi/qm

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d0eeff4cc8a6f8f9ae93e8f879db7b1a40bf21fa5df679d330f3538352e34d

Files

a7d0eeff4cc8a6f8f9ae93e8f879db7b1a40bf21fa5df679d330f3538352e34d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE