659ac1f344c3b125f08fbaa98449ab07892390183c0fa1e4491f2cd1767b24f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

659ac1f344c3b125f08fbaa98449ab07892390183c0fa1e4491f2cd1767b24f2
Size

8KB
MD5

45dffbad81db4f618d431223a6ea635c
SHA1

6bbb78bcbe3926cad8391c85b4d5ce46a151832a
SHA256

659ac1f344c3b125f08fbaa98449ab07892390183c0fa1e4491f2cd1767b24f2
SHA512

6cceb0e5fe49da0ed0421238945ba164b0f90fcf40b1255d0dab191bfcb4d518ccc7999f92d212e870a29c623f64c5aacff1474b71b85df035542826f1aa7524
SSDEEP

96:0FG8vGHrV8b+3DtXZq1CjIU2pPOjTLO+sBv2cIrLZU2B4qoZHqzhNix435Ba:0FG8OrVe+3G1PpPOTO+qAFBd0qzhNdQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
659ac1f344c3b125f08fbaa98449ab07892390183c0fa1e4491f2cd1767b24f2

Files

659ac1f344c3b125f08fbaa98449ab07892390183c0fa1e4491f2cd1767b24f2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZyxPq3f
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Zephyr4
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ