fb2afe160ae168f8c832f8706779a760N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb2afe160ae168f8c832f8706779a760N
Size

54KB
MD5

fb2afe160ae168f8c832f8706779a760
SHA1

2bc934e7a2dd98bbc332e77b1981b2d2a929310f
SHA256

47e245a6ca7687e833bdae6e30a62ac3d3af7788eb0731e64fa39eefad140a4e
SHA512

310840b882a86dcfbe945d6c21580ad4556c24824b61852ba16043ce9d18eb4b96a8100b56b54ca645d337dec47cc71fc18d303a69e56082546880915c2df63a
SSDEEP

768:V7Blpf/FAK65euBT37CPKKQSjyJJ1EXBwzEXBwdcMcI9o6VG+VGoVG+VG7Y69Z8d:V7Zf/FAxTWoJJ7T1XRX8Y6IY6R

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb2afe160ae168f8c832f8706779a760N

Files

fb2afe160ae168f8c832f8706779a760N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE