96dd5bd158ffbfc27caf42f2b4652b80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96dd5bd158ffbfc27caf42f2b4652b80N.exe
Size

268KB
MD5

96dd5bd158ffbfc27caf42f2b4652b80
SHA1

92242f89e5c8a9280561851fc3a47c03f1c485d4
SHA256

79b37d410f7cb03e750d47ce9c589706d4bfc4a0929d46ea1df6b968de9d7270
SHA512

c61012f9f100092458f2402c5747a34bada906ee39be5314e73643c859ab2dc2c671b390ed19d410334ddd1948a033d3c9e7d6ea678a34486bb411ab1f922982
SSDEEP

6144:7mVnSUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKt2:o68XS8+d8HamysaZHRD44M3ZzF/Gez2N

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96dd5bd158ffbfc27caf42f2b4652b80N.exe

Files

96dd5bd158ffbfc27caf42f2b4652b80N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 41KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE