9c51e902c359127de0dc1ce807f7cb65eb1244494af7e56236d5de50497c486a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c51e902c359127de0dc1ce807f7cb65eb1244494af7e56236d5de50497c486a
Size

3.8MB
MD5

08d0eb836ccaae9e4200d279dffe2088
SHA1

6604d22da31f2d978e18b7a3176b1d460197dee4
SHA256

9c51e902c359127de0dc1ce807f7cb65eb1244494af7e56236d5de50497c486a
SHA512

c3ab8a8f35fc144218161e9e44c91cd14450e8634043148f16863702110c6601e43620fe10b057d479c79dc045f2631a5f5096382f1e7e10024904b2c9f5b545
SSDEEP

49152:8eHDME5aD/cUysv1yIY3VusLizI3nK14:8zE4QUysQ3VusLqe

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c51e902c359127de0dc1ce807f7cb65eb1244494af7e56236d5de50497c486a

Files

9c51e902c359127de0dc1ce807f7cb65eb1244494af7e56236d5de50497c486a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE