f9d615a6ef2e49c26a9ec8c4c199c180N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9d615a6ef2e49c26a9ec8c4c199c180N
Size

56KB
MD5

f9d615a6ef2e49c26a9ec8c4c199c180
SHA1

96eb2734233ab45072863bb049f808d86b33e516
SHA256

5561b7c72c5a82b49a25760878e2b001cfde745ad086280202b574d3512be5b0
SHA512

5869433177e28917841db15a82a6386c48abcc1571d48f409d6b1261fb8995ce925004698fe9b246ef789f5aa155318dda566a56dd098d38c05727d7e6a66ca9
SSDEEP

768:BCVMDJ5J3eXEcdgRvtYY7qk0nlfeKoSXenKDWMDQmYi:hJ5EXEc2XHqk5KokiAQmj

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d615a6ef2e49c26a9ec8c4c199c180N

Files

f9d615a6ef2e49c26a9ec8c4c199c180N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE