d294cf1e285dea1f06ac245914571d2b26c1683f2971acb9b3d6fdca68108053N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d294cf1e285dea1f06ac245914571d2b26c1683f2971acb9b3d6fdca68108053N
Size

129KB
MD5

3d8660c4981d6a3613be8055133fe980
SHA1

df33bc3138f5246f87068f6b3386b29b7a921644
SHA256

d294cf1e285dea1f06ac245914571d2b26c1683f2971acb9b3d6fdca68108053
SHA512

50f6525cee837f0374c0740664fe3aa9f43cfed7b5caab2133677b25ec022aa0c3c62a0b2375354c0e1ad5f1df0b7769e781f81685a78322eb274469dd3d87d7
SSDEEP

1536:V7Zf/FAxTWoJJ7TzY3hx+fsio5UxKzWZ64+A8x:fny13VEio5Ua4N6

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d294cf1e285dea1f06ac245914571d2b26c1683f2971acb9b3d6fdca68108053N

Files

d294cf1e285dea1f06ac245914571d2b26c1683f2971acb9b3d6fdca68108053N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE