62d0c7a99b249f58080bfd2d7cda3d5b0ed7555ebb25f1bc06ac4b100e8f99feN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62d0c7a99b249f58080bfd2d7cda3d5b0ed7555ebb25f1bc06ac4b100e8f99feN
Size

97KB
MD5

13b6caa6b2a0e7ca8bbd527921bd22b0
SHA1

002e358d0d4c0c0b8c048a8ebfdb3d7c589cd393
SHA256

62d0c7a99b249f58080bfd2d7cda3d5b0ed7555ebb25f1bc06ac4b100e8f99fe
SHA512

275c2058267b10e2c99f9bf2825c12b3f3ae30ab3ed54e63e55a9d2ebe3991933eb4166a0a7d7ec16304658ac09ede9d56f2a0b1f1c6bf25ec69ce69ac422550
SSDEEP

1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8IZTwhx58hx5z+LG/H/yZGMR:fnyiQSo7Z6xcxN+LG/KZGMR

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62d0c7a99b249f58080bfd2d7cda3d5b0ed7555ebb25f1bc06ac4b100e8f99feN

Files

62d0c7a99b249f58080bfd2d7cda3d5b0ed7555ebb25f1bc06ac4b100e8f99feN
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE