fc34987fbe8d8f2f4ffa30716fba70a4d0ba645334f300f01d86f7437f968736 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc34987fbe8d8f2f4ffa30716fba70a4d0ba645334f300f01d86f7437f968736
Size

127KB
MD5

b9bc155d20ff8af65484b5d63acffb09
SHA1

3e1706bf059cdf1aa508c40293aa43d49b1e8230
SHA256

fc34987fbe8d8f2f4ffa30716fba70a4d0ba645334f300f01d86f7437f968736
SHA512

30930d898246d227ba9ddc20cefaad8311c89f05656ec9384df7b3068bb75cbd13b3b309f6db324709cdf67183c473cfe8640e7df424a0c707ca73cec970d883
SSDEEP

1536:V7Zf/FAxTW2+C423jBh/fqwXaeYo+Vz163t7Hf:fnyJ823jbbXaeYzet7Hf

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc34987fbe8d8f2f4ffa30716fba70a4d0ba645334f300f01d86f7437f968736

Files

fc34987fbe8d8f2f4ffa30716fba70a4d0ba645334f300f01d86f7437f968736
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE