8de1167dc6ccfcb71c14b61709b3b478041e2eee180c2e391acd027f8765817e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de1167dc6ccfcb71c14b61709b3b478041e2eee180c2e391acd027f8765817e
Size

29KB
MD5

d7b8f893e1fc4501df129058619ee9de
SHA1

f36ea0af1118885db2a97a6e5bf63c6b77d90164
SHA256

8de1167dc6ccfcb71c14b61709b3b478041e2eee180c2e391acd027f8765817e
SHA512

a6d153443fd136b6080f2c1630f5b242d835e0d40ee84db05fa8c8841fe69f5eae35269cce21206ba0e8d9b6e3ca24396de8c25ecb534df12e29ebd108dde1bf
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/qZ:AEwVs+0jNDY1qi/qyZ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de1167dc6ccfcb71c14b61709b3b478041e2eee180c2e391acd027f8765817e

Files

8de1167dc6ccfcb71c14b61709b3b478041e2eee180c2e391acd027f8765817e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE