98d995b880230fb09503d88d817d0ab34b0959aeb860e4b447de565e501ba018 | Triage

Sharing

General

Target

98d995b880230fb09503d88d817d0ab34b0959aeb860e4b447de565e501ba018
Size

161KB
MD5

d02a9db1d59b33337e1d43502e9c8342
SHA1

648be30ca4ef653e654f7a22cfd367b77920550e
SHA256

98d995b880230fb09503d88d817d0ab34b0959aeb860e4b447de565e501ba018
SHA512

8306e23271adbc33a299f21bfb6349f8223ea2579dac00cd1925c0e0d70ce82c02f4b7280ec61905d7652f72f340c700506d7ed3dc6ae848de8c4ae72e3a9cbd
SSDEEP

3072:i5SVkkgUWib1UC7AdYzrV+Dljy/32ubwZZqJ:pUquCkdYzrVolu/J0ZZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98d995b880230fb09503d88d817d0ab34b0959aeb860e4b447de565e501ba018

Files

98d995b880230fb09503d88d817d0ab34b0959aeb860e4b447de565e501ba018
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 58KB - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE