d95abc20f76133d357b4a15e302835693ecfeac92fa605bae68b3660024545f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d95abc20f76133d357b4a15e302835693ecfeac92fa605bae68b3660024545f8
Size

29KB
MD5

e48af7462d328c7246800b2cc922f5d8
SHA1

7d2a3032490bbeed2d544376ee6c32e4722232d4
SHA256

d95abc20f76133d357b4a15e302835693ecfeac92fa605bae68b3660024545f8
SHA512

b8c4b5b0d77aa92ee1bba07ac52cdad470b8e92259913416d00514d0a870cc249a699e79725b251029385e49f115a73c1d2b05c922b24bea94314788c53c4d0b
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/J3:AEwVs+0jNDY1qi/qR3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d95abc20f76133d357b4a15e302835693ecfeac92fa605bae68b3660024545f8

Files

d95abc20f76133d357b4a15e302835693ecfeac92fa605bae68b3660024545f8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE