bb0cbed043b94165837045f4cdc0ecc0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb0cbed043b94165837045f4cdc0ecc0N
Size

29KB
MD5

bb0cbed043b94165837045f4cdc0ecc0
SHA1

32b220410040d0ab4bf2c7419d2a630474be3e52
SHA256

98d9bf344d9dabd9eefcda1b979f64ac09ec9b0bf3ae9e8862d2e357b046e719
SHA512

e62030e769e5a5d242e19f1f956e1bb34d39d359e534a2755300842509db366134f475559e70e98a9d76eb02b8b3b5dc566d6e7a82b0505e529dfee107d224ac
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/d:AEwVs+0jNDY1qi/qV

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb0cbed043b94165837045f4cdc0ecc0N

Files

bb0cbed043b94165837045f4cdc0ecc0N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE