dda198f07e192d8cd5eb16e2a04fe9d0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dda198f07e192d8cd5eb16e2a04fe9d0N
Size

75KB
MD5

dda198f07e192d8cd5eb16e2a04fe9d0
SHA1

726a942ca7e7c5472d0e01cc533298f49881d4db
SHA256

a70e06fc1768ca566d1c075a64082c6a4fa3d05def7485ba3f5491374b81ba04
SHA512

674180113a27bf22e32053542c7a01823320d7cd6432060dc0ed844214ccd858cc959db9f39ca78cd231a1970498ac663bd4cb7391686fc9736da896bf6ed518
SSDEEP

384:ZItlYLkfSoxGMwIfUzAI7+U5Qi8PfOc9cCWRLzENdloN1T8F0pEEurnkSX3uo9v2:Z+CLZoyIm5Dz2srIFLD3VvKX0QOH8hX

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dda198f07e192d8cd5eb16e2a04fe9d0N

Files

dda198f07e192d8cd5eb16e2a04fe9d0N
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE