872824d9bdaa7b663af78fa9d877004f5e226c39d4880b1c8cd9622670a9259b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

872824d9bdaa7b663af78fa9d877004f5e226c39d4880b1c8cd9622670a9259b
Size

29KB
MD5

cbb6838aa4598a2896439d46563f6ee2
SHA1

ad2db2e2e1b5cf000ae4b6c879bea519527fd77f
SHA256

872824d9bdaa7b663af78fa9d877004f5e226c39d4880b1c8cd9622670a9259b
SHA512

699affcd6996de8d5d586da6bb619b839cc6ab619002790cdc76e12c22b60c64e5f38ed68e41f3dc46ecebc59af1a20c2c42152ea37f8b63a7e3a5e66d102434
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/TJ:AEwVs+0jNDY1qi/qd

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
872824d9bdaa7b663af78fa9d877004f5e226c39d4880b1c8cd9622670a9259b

Files

872824d9bdaa7b663af78fa9d877004f5e226c39d4880b1c8cd9622670a9259b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE