70d1f36f46c34f802177a17c1f80ea5858d7cc325dd22ad3e604e1db21710daeN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70d1f36f46c34f802177a17c1f80ea5858d7cc325dd22ad3e604e1db21710daeN
Size

88KB
MD5

76a54e305ded68d88fe87ffd791b5c60
SHA1

2a19d3125820f9f04cde6465e1039f43fe40bd38
SHA256

70d1f36f46c34f802177a17c1f80ea5858d7cc325dd22ad3e604e1db21710dae
SHA512

f1303f4f8335526a3f42c3291b4bfdf86a207b8424778e41a747831ad6e7b3ac7a16fcde7d874f0b5f7c623ec20524df504c73bd0c6a27aaeb454e95915b1590
SSDEEP

1536:V7Zf/FAxTWoJJZENTNyoKIKMLiy4X/00y/uX8P:fny1tE5KIKl/Bymc

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70d1f36f46c34f802177a17c1f80ea5858d7cc325dd22ad3e604e1db21710daeN

Files

70d1f36f46c34f802177a17c1f80ea5858d7cc325dd22ad3e604e1db21710daeN
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE