cd1c2b4dbecd5880ae0fa5de6a4cad3c99501c6c6c1fb7d501280006ab1a107c | Triage

Sharing

General

Target

cd1c2b4dbecd5880ae0fa5de6a4cad3c99501c6c6c1fb7d501280006ab1a107c
Size

109KB
MD5

df6f7d5e6a3517232f39274c7e14e740
SHA1

bf57e5afc04dbb72ef7bf6c7d19d507056261a6f
SHA256

cd1c2b4dbecd5880ae0fa5de6a4cad3c99501c6c6c1fb7d501280006ab1a107c
SHA512

8948c5d46c43c039dbac33825bb080b646989bddca55625477d6e1bfc8edf4ca6c8dce3fef69dc2c83b07b15dbdab6a6176b414249d1d125f47dff4e65e00edf
SSDEEP

1536:V7Zf/FAxTWoJJZENTBTYM2ltIYXYgaERT+G9v/F:fny1tE12ltIYXYgaiFRF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd1c2b4dbecd5880ae0fa5de6a4cad3c99501c6c6c1fb7d501280006ab1a107c

Files

cd1c2b4dbecd5880ae0fa5de6a4cad3c99501c6c6c1fb7d501280006ab1a107c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE