0bd0aec733c896281404a6fab84f2d0ea56b5e4f4f3967a189c3de6359612444 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bd0aec733c896281404a6fab84f2d0ea56b5e4f4f3967a189c3de6359612444
Size

8KB
MD5

0c715093912982d7975e932999ffc95d
SHA1

c41773be51f5aa15952a4bf465eef996c276e451
SHA256

0bd0aec733c896281404a6fab84f2d0ea56b5e4f4f3967a189c3de6359612444
SHA512

348dd2f4637c766412ddbcb0b5646672e178de00ca44607c0c73f6c13c64eff0c8dfdd63880d1b01a17f6b8d289bfa8857db490e47b6617b6ec31ec3dde33478
SSDEEP

96:VyG8vGHrV8b+3DtXZq1CjIU2pPOjTLO+sBv2cIrLZU2B4qoZHqzhNix435Ba:VyG8OrVe+3G1PpPOTO+qAFBd0qzhNdQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bd0aec733c896281404a6fab84f2d0ea56b5e4f4f3967a189c3de6359612444

Files

0bd0aec733c896281404a6fab84f2d0ea56b5e4f4f3967a189c3de6359612444
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AlphaPe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TechFle
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ