fa1bac0c0ece621d18af618585f46ac961cb1fad4ce0ebba872dab278e5f020b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa1bac0c0ece621d18af618585f46ac961cb1fad4ce0ebba872dab278e5f020b
Size

71KB
MD5

03dd1e3f4cf68fac5cf33bb844406c10
SHA1

861ff864c7f74795f124ac2de0e86407e4ecf055
SHA256

fa1bac0c0ece621d18af618585f46ac961cb1fad4ce0ebba872dab278e5f020b
SHA512

67faf629488133f5179e6bf3f519cf1e93f548caf1145605e56ef4390dd0b7cd432e7fa83668d2e9613377e062a69c972698d2378982605aaeb88a0bee3f242d
SSDEEP

768:V7Blpf/FAK65euBT37CPKKQSjyJJcbQbf1Oti1JGBQOOiQJhATNyQY366:V7Zf/FAxTWoJJZENTNyQYd

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1bac0c0ece621d18af618585f46ac961cb1fad4ce0ebba872dab278e5f020b

Files

fa1bac0c0ece621d18af618585f46ac961cb1fad4ce0ebba872dab278e5f020b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE