31b3318414f87a2e078d5570c00b67dd4ff6df2a8f08b1c09fa1a4e1364ffe96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b3318414f87a2e078d5570c00b67dd4ff6df2a8f08b1c09fa1a4e1364ffe96
Size

1.6MB
MD5

6ad01552798f13cb30cba458cca72902
SHA1

86af7a957f5a1ab5b06372ee2a50d7affc4200bb
SHA256

31b3318414f87a2e078d5570c00b67dd4ff6df2a8f08b1c09fa1a4e1364ffe96
SHA512

df0c8d0ac8eb6639ea8e15145b929c22a4345441ff85161f75af55dd01ea4972e18432543fe39fca3768fac0ba5c045f44b4fa5f1ceaa877d474ae4e7cfcf763
SSDEEP

49152:nr36QVBLLnPj35GLMC2jgNGZ8+JzCAZ0:nb6efVj1tkQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b3318414f87a2e078d5570c00b67dd4ff6df2a8f08b1c09fa1a4e1364ffe96

Files

31b3318414f87a2e078d5570c00b67dd4ff6df2a8f08b1c09fa1a4e1364ffe96
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.5MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE