71087ce8953410ba18f8e087cb459bd93a147b5b3ec40ed74f55a74ff4bb759f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71087ce8953410ba18f8e087cb459bd93a147b5b3ec40ed74f55a74ff4bb759f
Size

29KB
MD5

c0673b3f1f9a9bcb60415c2d330da9d0
SHA1

1756809e6c888f001371f7fe9e96b31b86e916e0
SHA256

71087ce8953410ba18f8e087cb459bd93a147b5b3ec40ed74f55a74ff4bb759f
SHA512

261eb582ee4a23720bd0be0819f556938dcbb9a038382252d2ccd0ae688196c317bec492aae552271eabefe39d598407eb44356bcce910af8b1a054b0bcb83eb
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/W3:AEwVs+0jNDY1qi/qO3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71087ce8953410ba18f8e087cb459bd93a147b5b3ec40ed74f55a74ff4bb759f

Files

71087ce8953410ba18f8e087cb459bd93a147b5b3ec40ed74f55a74ff4bb759f
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE