e410047eb3b89ae2cf5b8758e9386e50N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e410047eb3b89ae2cf5b8758e9386e50N
Size

110KB
MD5

e410047eb3b89ae2cf5b8758e9386e50
SHA1

1dc9ab5ec0898b1954dd8ba800c1d428e8d375c5
SHA256

86acd341e0726ae273924d057a1ca2817f2f8982d73ea197f4c84fa1b49d83fd
SHA512

5172f36e32c8ff44e0783e41d3c42a0c3c99d243cdebbeb5c633f6b97af7caf256c67330e6e343be269beeb07fb226aeb2f5ca35f56d86b098e24a98b03a5daa
SSDEEP

1536:V7Zf/FAxTWoJJZENTNyl2Sm0mKuC1TC196Xv+HSXIBlE3hha08yZySzCeRSZ7M3:fny1tE42Env+HSXIBlf08qySzCeRS23

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e410047eb3b89ae2cf5b8758e9386e50N

Files

e410047eb3b89ae2cf5b8758e9386e50N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE