64af9a6c9ec3ccfc81b2f9346b5c556e4e05683c105099029fc05769afab6f04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64af9a6c9ec3ccfc81b2f9346b5c556e4e05683c105099029fc05769afab6f04
Size

3.9MB
MD5

045206a999814b90c1a185a49cd43c36
SHA1

9c2d2907b0a819935257dd312d0b8c77c88c6ce7
SHA256

64af9a6c9ec3ccfc81b2f9346b5c556e4e05683c105099029fc05769afab6f04
SHA512

14ca5093f74f56ffdb29a9e033b30d68970f9d05816bb5fbb166925c7ad0c016d8460dd52fd8843f8d4c40ba786382b33daf8ed15fd35d92138803d3e1830756
SSDEEP

98304:1et6nAnRL8tc42PhmYVO2wsWBFhfNGdZcURzA59CTO7:1pURN421WvEdZwCT

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64af9a6c9ec3ccfc81b2f9346b5c556e4e05683c105099029fc05769afab6f04

Files

64af9a6c9ec3ccfc81b2f9346b5c556e4e05683c105099029fc05769afab6f04
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE