ea209150990f5f898bbe10ee3c655cc0c55b8e377a8680365012b1e95e96b79b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea209150990f5f898bbe10ee3c655cc0c55b8e377a8680365012b1e95e96b79b
Size

6.9MB
MD5

7c94b1fe113b4ceb8aaf10c019043121
SHA1

fc185d7709cccb03fd80059772e4f34060498078
SHA256

ea209150990f5f898bbe10ee3c655cc0c55b8e377a8680365012b1e95e96b79b
SHA512

14d5a17e425af7d6a4bba1735bd5b5d77c6691e99fb3a9dc33fc47231aacfa180932ea19d584c467dd2298e887423e1407ab22883a3b0a801de10364c1fcde02
SSDEEP

24576:ccfMwlB8KiL8oo80sNQC060rXw4rx5kUi0LT0WaBYU6Hh0mFp+pib6lYknHCWWbn:c/cXziJP18jjbjzPKGlF7iq

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea209150990f5f898bbe10ee3c655cc0c55b8e377a8680365012b1e95e96b79b

Files

ea209150990f5f898bbe10ee3c655cc0c55b8e377a8680365012b1e95e96b79b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE