9de24b6c59b46be8d01661afa82fcc60deefcf93dcdaa2f31bd20312d00e3ed0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9de24b6c59b46be8d01661afa82fcc60deefcf93dcdaa2f31bd20312d00e3ed0
Size

190KB
MD5

e3b991cc97e0bccdc1965b387529def3
SHA1

e0d386f691a14e9cd77cdb8202bc84eacb7a3a6c
SHA256

9de24b6c59b46be8d01661afa82fcc60deefcf93dcdaa2f31bd20312d00e3ed0
SHA512

e2b884bbf3521435d81d1d6958a296ae3ff05932faf3ccddfac3bdfc136bca40f45c533dfb496e5a9354d31c8ac6690a1c03eb52cf3014205701ec3a72273c73
SSDEEP

3072:HGBT753Q2RgWgMlIx1ZiXjb6aEF6D0NM9voeLNZ2j8Cr2:m75XRgWg4aAXjb6aEFfooeLNZxC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9de24b6c59b46be8d01661afa82fcc60deefcf93dcdaa2f31bd20312d00e3ed0

Files

9de24b6c59b46be8d01661afa82fcc60deefcf93dcdaa2f31bd20312d00e3ed0
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 132KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE