0a7ad8b4ba6b023da27da7962f2720fe783cfebf6204c805f4b4537996cace68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a7ad8b4ba6b023da27da7962f2720fe783cfebf6204c805f4b4537996cace68
Size

283KB
MD5

4e264e786f01ce15e502c9c4719d4514
SHA1

45ea4cb6e445f0b644e2bc4ae489a60200b03e0a
SHA256

0a7ad8b4ba6b023da27da7962f2720fe783cfebf6204c805f4b4537996cace68
SHA512

50251ea1030e28593430db9c3f9bd5246eb5b57dace200de9f3e01af1cc070d428ff665367f4497a08fdf8ab1306870854e4f091c87b4f992f995b455cab45ba
SSDEEP

6144:SgHX5BGeyzxxWf26TUQ9NwWlIaLhjgWzDT2+Sb:SgHX58NxWPX9NwWqaVj6N

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a7ad8b4ba6b023da27da7962f2720fe783cfebf6204c805f4b4537996cace68

Files

0a7ad8b4ba6b023da27da7962f2720fe783cfebf6204c805f4b4537996cace68
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE