159ce0d922e78815c0686037a5ea691433de9a33f4655421777a0939e7340137 | Triage

Sharing

General

Target

159ce0d922e78815c0686037a5ea691433de9a33f4655421777a0939e7340137
Size

253KB
MD5

65993cb849429b827f28c8f386580f8d
SHA1

4c30008da0f3e3f79450ad627d64a0589e10ee90
SHA256

159ce0d922e78815c0686037a5ea691433de9a33f4655421777a0939e7340137
SHA512

e71f438fb38b240b4a1096752264767e4604689f8172b2b66f4d6a9952e224bba775a44f462aa0f210f0f5fd9fc321fc5571a458b53f2d1cfc7827904c06bae0
SSDEEP

6144:KMsN3RC5XQnX8LWL2/BYR0NDKPeO+Xa/i:KMKBSXQRyJYRjeLXa6

Score

10^/10

Malware Config

Signatures

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159ce0d922e78815c0686037a5ea691433de9a33f4655421777a0939e7340137

Files

159ce0d922e78815c0686037a5ea691433de9a33f4655421777a0939e7340137
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ