3a0435b5df26339e646bc95d032c4da0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a0435b5df26339e646bc95d032c4da0N.exe
Size

67KB
MD5

3a0435b5df26339e646bc95d032c4da0
SHA1

c8a2319f9fbfc1dbc11b1c82771f8c572c494eb1
SHA256

2913187342b54d4d7f2a482ca38cee79a5f14d9e764abd693be2167fa29c538d
SHA512

905b4943825fb7f47f29e57a2c85251a5d2d66da53a760dbdd8baf4bf779db3278ee8c633d7bde40ecfad885923038270a9669dd714884cae5747dc0a6426cb7
SSDEEP

768:N+CLZoyIm5mn0000IFL8VlVJovlNHBvBPcFhl1WVe8gbxfxhM+g6hG:N51tI/nIFLcJonhpPcjiebbxphM+K

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

3a0435b5df26339e646bc95d032c4da0N.exe
.exe windows:5 windows x86 arch:x86

Code Sign

f9:24:71:c6:d0:e2:d6:d4:43:eb:f5:b6:9e:0b:24:b2:4b:11:9c:26
Signer

Actual PE Digest

f9:24:71:c6:d0:e2:d6:d4:43:eb:f5:b6:9e:0b:24:b2:4b:11:9c:26

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE