f728eab9066c19dd8e77eee1f473c8fda890e396b62d309e9d1a27475d5b84f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f728eab9066c19dd8e77eee1f473c8fda890e396b62d309e9d1a27475d5b84f2
Size

82KB
MD5

d9335386951a211bcf2081c0fb6d7d01
SHA1

69749fed761c0bccee580cff31022dd4533bd1df
SHA256

f728eab9066c19dd8e77eee1f473c8fda890e396b62d309e9d1a27475d5b84f2
SHA512

129585633d79bc8a82faafb40669db6d05c33b895a815bafa7981066f28c8b37d2262adb7d6e5c4722cdfc860668eb2f2526250396fde4d53403aa7eed5a45bc
SSDEEP

1536:HdA7DUQLP8d1dQwFMR7LO8wjrLC7KQknCoFYgW4MNweqGd5f75T:9uwQLP8dbQwORXKfVC/sMNweNd5f71

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f728eab9066c19dd8e77eee1f473c8fda890e396b62d309e9d1a27475d5b84f2

Files

f728eab9066c19dd8e77eee1f473c8fda890e396b62d309e9d1a27475d5b84f2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE