863028c3ffeea55d6072617141a7c5ee4013d414fa58dbf5a79a6144b9366a11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

863028c3ffeea55d6072617141a7c5ee4013d414fa58dbf5a79a6144b9366a11
Size

57KB
MD5

701ba5fbe80258df6c0e615c56d1706d
SHA1

adbac0536737753a8767ed870d6b188af50e3b9b
SHA256

863028c3ffeea55d6072617141a7c5ee4013d414fa58dbf5a79a6144b9366a11
SHA512

b0d514b9ba555617f797b665aa517885e2df30588cb5180ae4d77bb8fc0bd6a6b6a617105bf7970c0257a46f54feb8fe23ed987e5bb26b33766f7d8dfea8366b
SSDEEP

768:oZL/0F24lercjO4sTZg5ZLvn2IuWZ0kqhZpLyIXLhpPyebakKMMeCT:kLsF2Kerc64sTiX2IV0DhGetoeb96

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
863028c3ffeea55d6072617141a7c5ee4013d414fa58dbf5a79a6144b9366a11

Files

863028c3ffeea55d6072617141a7c5ee4013d414fa58dbf5a79a6144b9366a11
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 25KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE