b9c449542623908c21c482be0ae90250N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c449542623908c21c482be0ae90250N
Size

296KB
MD5

b9c449542623908c21c482be0ae90250
SHA1

7d4895e5d6632069119e089141b6cd6722285204
SHA256

017a67db4b5e6c10f2cdf86d7b5d26ed973dde8bf61586e765dfb6f3c545b0b7
SHA512

5f5bbf3b24afb3e03275ac385ce05f1f8176a68d4cfc88c3427cd6605629f88adfc0495ae3ff60215a0ee693ea30d4297db073f6cc15f837e6e630f7ce5c2779
SSDEEP

6144:NDPffQewObao6PQtLq4/kcWsyB1gGJcYYFNOicwl1AxARCrKBU/x0c1cKCSC8CNK:RPffQewObao6ItLq4/kcWsyB1gGJcYYG

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c449542623908c21c482be0ae90250N

Files

b9c449542623908c21c482be0ae90250N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE