bf8bdc05c9aa15e8e1d99729eba5e530N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf8bdc05c9aa15e8e1d99729eba5e530N
Size

953KB
MD5

bf8bdc05c9aa15e8e1d99729eba5e530
SHA1

6d15d07d4c018f236e1dd6e3248b10b082c3b3cf
SHA256

1748035d40a040f0a1cd5f6f8bc1343da68f197f3163e1537040065be1b91a49
SHA512

cd2dcaec8241ab09f907ac2f62f69e7245106c710bce76341261ed9fa145dbd39590ee869d4f14101686fa7f8db73f541fb76b1ae158e1bb60b3df41ba55e02e
SSDEEP

12288:PSqQY/uiCs3sJXqmmVVlTvVTCRRAF8FwY4KYXjBEviiJSpS:6o/uiCs3sJ6mmVVlTvpF8FwL1TBE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf8bdc05c9aa15e8e1d99729eba5e530N

Files

bf8bdc05c9aa15e8e1d99729eba5e530N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 709KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 235KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE