6de1c5d6c3473091c50c1d8cca73f1fabb7e5222c881f9a1c231f25cff0437c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6de1c5d6c3473091c50c1d8cca73f1fabb7e5222c881f9a1c231f25cff0437c6
Size

29KB
MD5

7fcd492ff3405e3b262c72bde7935923
SHA1

ae832c53cfbe3d0bb9228218f4a3f2eba011e200
SHA256

6de1c5d6c3473091c50c1d8cca73f1fabb7e5222c881f9a1c231f25cff0437c6
SHA512

83f8c58d08f7b75388128f885d79737598b0f5d246ae68fbc13d49c68ee724c0c09548e2ad776471a1e844682ffe10d6621355ec137991a1ad2eb7e648a3e8cf
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/U:AEwVs+0jNDY1qi/qs

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6de1c5d6c3473091c50c1d8cca73f1fabb7e5222c881f9a1c231f25cff0437c6

Files

6de1c5d6c3473091c50c1d8cca73f1fabb7e5222c881f9a1c231f25cff0437c6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE