71d523739812b101982fe1cc4fe91440N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71d523739812b101982fe1cc4fe91440N
Size

76KB
MD5

71d523739812b101982fe1cc4fe91440
SHA1

e6c8df4442904e6249edc5d5d9316bca9735a4f0
SHA256

a8a949c1a6d0a824e6932e9b51fd5e022145e43a872abce21cf3f3a3c6f23a87
SHA512

11aaec9e49cbe542bd1018e4d97143d6433ca2b37cca5774995a38a465427d6f281d9562637826c256e588eeb1b6e284abfe238517360abf2eeb4ee945e71495
SSDEEP

384:ZItlYLkfSoxGMwIfUzAI7+U5Qi8PfOc9cCWRLzENdloN1T8F0pEEurnkSX3uo9vd:Z+CLZoyIm5Dz2srIFLD3VvKX0QOH8hTk

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d523739812b101982fe1cc4fe91440N

Files

71d523739812b101982fe1cc4fe91440N
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE