b9958d972a8eb04d5281cf29d1f5f870N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9958d972a8eb04d5281cf29d1f5f870N
Size

268KB
MD5

b9958d972a8eb04d5281cf29d1f5f870
SHA1

feb6c4bf0677783b39f2438b96695f83cdf1ab8e
SHA256

1eabf88acc895032e1db1865bbfec7dfcaf31ec3be60f12e6c85b2901a92baab
SHA512

1f23c3a51a5cea75768cdae92de616969a7809c125592ff34c57ed099ffc44a6916edc8e015c3a133d76bd3088f93c0b1b6a62001bd728c30860700cb94faacb
SSDEEP

6144:7mVnSUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtc:o68XS8+d8HamysaZHRD44M3ZzF/Gez2F

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9958d972a8eb04d5281cf29d1f5f870N

Files

b9958d972a8eb04d5281cf29d1f5f870N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 41KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE