b0c640d36cdabe642c4fd1664c3d462a9b9ae43e8981ab022af8552ad3b7ea74 | Triage

Sharing

General

Target

b0c640d36cdabe642c4fd1664c3d462a9b9ae43e8981ab022af8552ad3b7ea74
Size

115KB
MD5

8a388c6174772dade82b172c667c3b33
SHA1

86aac3f16a1bd4d406b14246575448a2a62d51b0
SHA256

b0c640d36cdabe642c4fd1664c3d462a9b9ae43e8981ab022af8552ad3b7ea74
SHA512

7a976528e86cdea2b19a52004a3411f9494470d9918434b0c3f4e6b08d17e5a57cca657672970f9f8c5cc001843acdc3895368dea9b75692b79a3ad753304ddc
SSDEEP

1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8+zCuMTWn1++PJHJXA/OsIZfzc3/Q8+q:fnyiQSoUuMQSo8

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0c640d36cdabe642c4fd1664c3d462a9b9ae43e8981ab022af8552ad3b7ea74

Files

b0c640d36cdabe642c4fd1664c3d462a9b9ae43e8981ab022af8552ad3b7ea74
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE