0a1cf087d8d4b82e823c47da1b9277d9a03bb59b12f231289061a54a4062ca70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1cf087d8d4b82e823c47da1b9277d9a03bb59b12f231289061a54a4062ca70
Size

140KB
MD5

4118ac1651224402ced266c5571e8cad
SHA1

9eeba1de3dc9be88246ddbc35cbbb9604f9005da
SHA256

0a1cf087d8d4b82e823c47da1b9277d9a03bb59b12f231289061a54a4062ca70
SHA512

6341542f0aacb38f006c332fb4d6349dd50dd6ba3fdeed1d53f5c422cf8b0be67c77701c3e936180354d3a75067dedd19d566d5bdb46e64285b99adfbc267e80
SSDEEP

3072:fnyGnuosZSnJUwFU+FUhFUeFUXFUqybtriLQFzwK0:KGnqc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1cf087d8d4b82e823c47da1b9277d9a03bb59b12f231289061a54a4062ca70

Files

0a1cf087d8d4b82e823c47da1b9277d9a03bb59b12f231289061a54a4062ca70
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE