9faa06d87ea55740224e40a26f50e30edabd7b3655db2d883085cc18e36e6379 | Triage

Sharing

General

Target

9faa06d87ea55740224e40a26f50e30edabd7b3655db2d883085cc18e36e6379
Size

473KB
MD5

92f4fdbbc881a0537c28d161523a5e66
SHA1

cc5463cdd07682ed6f67c05f741f65bbd24d5087
SHA256

9faa06d87ea55740224e40a26f50e30edabd7b3655db2d883085cc18e36e6379
SHA512

5eb72abdfceb5f0fa35ce1106ef6d660538ab35bd31f1bfcf07f5f228de34d09c857a0c2362937af77701919ca035d1ce2224b7790f96e370fd19363f56e8584
SSDEEP

6144:WdspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70Nqr:s8kxNhOZElO5kkWjhD4AI

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9faa06d87ea55740224e40a26f50e30edabd7b3655db2d883085cc18e36e6379

Files

9faa06d87ea55740224e40a26f50e30edabd7b3655db2d883085cc18e36e6379
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE