c84f77c5486b54937ac1efcf4f906d96da0f09a033ee6566326977c31727a088 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c84f77c5486b54937ac1efcf4f906d96da0f09a033ee6566326977c31727a088
Size

99KB
MD5

8c340460a2dfd9c0a90bfe2250548cdc
SHA1

bc37111ccdda289dedd4338ea8c1df3c760bc55c
SHA256

c84f77c5486b54937ac1efcf4f906d96da0f09a033ee6566326977c31727a088
SHA512

7a3c839832a8439e037426ddbb7cd70368f7ce22a52451661e4184799397517a1f6cd9b599f12c59d53cc6f9cfa38bfab5a9d7719962008b778488e02b3040f6
SSDEEP

768:xGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyp:szqsQ5PIt4+/yfeB6r6YcOik5h36lY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c84f77c5486b54937ac1efcf4f906d96da0f09a033ee6566326977c31727a088

Files

c84f77c5486b54937ac1efcf4f906d96da0f09a033ee6566326977c31727a088
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE