bfb2ab329c7ac94a2125237448d8765b1911f7ff06af297d85e1abb06bce36e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bfb2ab329c7ac94a2125237448d8765b1911f7ff06af297d85e1abb06bce36e0
Size

29KB
MD5

0d442f197cdfc58942c80ab3a5ce7aad
SHA1

0b7d6f49416e57b51b65c12d9946ae72953d7b72
SHA256

bfb2ab329c7ac94a2125237448d8765b1911f7ff06af297d85e1abb06bce36e0
SHA512

c11913aafdfcd35448aab204c7b1131f8e5ea9902d07d37b1cfd36c822d58df2335eb66a1433efb8de31d0ff97f51b91e8c44e489edde7ea681b6bb15dbb1d05
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/I:AEwVs+0jNDY1qi/qA

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfb2ab329c7ac94a2125237448d8765b1911f7ff06af297d85e1abb06bce36e0

Files

bfb2ab329c7ac94a2125237448d8765b1911f7ff06af297d85e1abb06bce36e0
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE