91baaa8dd3039624269810a91dcbf100N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91baaa8dd3039624269810a91dcbf100N
Size

58KB
MD5

91baaa8dd3039624269810a91dcbf100
SHA1

3033d18f9c7876b72980a0154eacf824988a80b1
SHA256

46f6f90330c2c67fd48d7fe1ccf0dea13d081a72e03a5f551c413f0d31da198b
SHA512

efda1ac06a793e74be5ce8537fe9ddaa64bcde061b70221558eaf9675dce67183780cd1b8c6b4418827288c911e9de9882c6750735b7597989a15c056c02fd68
SSDEEP

768:r8eRH+MlFh0pDpuJ84WEi+U6sh7iQroCHmyf+RjFBSuB2XpfscsO:r9l+W8xFt6sh7iQroCoRB0u0sg

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91baaa8dd3039624269810a91dcbf100N

Files

91baaa8dd3039624269810a91dcbf100N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE