25e8431a38604e2bb9f40dfecba4461c9e21e873a89ae956bf2b23df3d20cd60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25e8431a38604e2bb9f40dfecba4461c9e21e873a89ae956bf2b23df3d20cd60
Size

3.2MB
MD5

87c1922f6e1272e077c204f3656ecfb3
SHA1

30ad9af76a403e31f48bec0e997e53f8308353df
SHA256

25e8431a38604e2bb9f40dfecba4461c9e21e873a89ae956bf2b23df3d20cd60
SHA512

1956a18109a98c5ec285a8c4b3c293feb995dd11a0194031dc49a1cf1ca54e9cd22dd54f983d18e5d2d952e0c4c2fd7e69aea37934a2f90ba72f5d14a56910e6
SSDEEP

98304:kPclHeRrlG4g5ea1g62WsvD/D+donCYUtsvD/D+donCYUG:kduSR7/A1YZ7/A1Yz

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25e8431a38604e2bb9f40dfecba4461c9e21e873a89ae956bf2b23df3d20cd60

Files

25e8431a38604e2bb9f40dfecba4461c9e21e873a89ae956bf2b23df3d20cd60
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 534KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE