2aeb9f46da6af3c129fc9c7bddcd244a3c7fbf10cca52465239842dcd0a1d6d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aeb9f46da6af3c129fc9c7bddcd244a3c7fbf10cca52465239842dcd0a1d6d7
Size

14.6MB
MD5

47f89da9d31661b4930baabd65ee39fa
SHA1

59895f3e2ca0b415bc3cea5133e4d91099138359
SHA256

2aeb9f46da6af3c129fc9c7bddcd244a3c7fbf10cca52465239842dcd0a1d6d7
SHA512

ae72d60906cb2a53786a041b03c356c4e9c7d977107f8f6330f324138323a3480097564df607cd8a4be26843d11cb818b9b2dc66df4074d21b494d04f77c2d1e
SSDEEP

196608:tjYUIs6DDKcxe+ZxtzGelHeT8ggmxmHGXNlnVavfg7VGhLDfUeFb76wq5Nj+rTOR:J6DDUSGMtWNjakeLDfzFe5gKL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aeb9f46da6af3c129fc9c7bddcd244a3c7fbf10cca52465239842dcd0a1d6d7

Files

2aeb9f46da6af3c129fc9c7bddcd244a3c7fbf10cca52465239842dcd0a1d6d7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE