6b7015dbb066e2b0da10984bb7c9dea0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b7015dbb066e2b0da10984bb7c9dea0N
Size

153KB
MD5

6b7015dbb066e2b0da10984bb7c9dea0
SHA1

ac56ae3d8b3fecdee4b0181e3fe365cc79142d01
SHA256

857a377e60c5af81d0b90d8b001e9a3dcf5efcb6872c0849ffb2b328f06d3c46
SHA512

e42e6df136bb251dda17af75e4e3842db093b6e3eba730a4b59592b690492ab6125fa7a1ed25485b3a7a421726eb79e98e4d5b972524eb0d22f6fc3b64ec608d
SSDEEP

1536:V7Zf/FAxTWoJJZENTNyQYawJLZ8/JLZ8MoJ7P81AuAfPS05PnDJtYfuKtIAF6cSS:fny1tEm7PgUXSAjZIInlxragr/FgwM

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b7015dbb066e2b0da10984bb7c9dea0N

Files

6b7015dbb066e2b0da10984bb7c9dea0N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE