72574e05645adb10cc972a5147145ba1a80346f44e34971f437f3fc77ffb1788 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72574e05645adb10cc972a5147145ba1a80346f44e34971f437f3fc77ffb1788
Size

694KB
MD5

983bf1c69c88099e56c15a984d88ef06
SHA1

668253afd6fc4318ef0e6f6a29f51b08b82d76d2
SHA256

72574e05645adb10cc972a5147145ba1a80346f44e34971f437f3fc77ffb1788
SHA512

6f77eabd34b34c2b9b099d8c48fc58721c43bd68d32c09b3d31884630416395abbaef73dafc1d3ed603c79fa720087f3b5d45865925d2a6385ee7bc8854fb82c
SSDEEP

12288:VQt5Htwivfz+KpLkm+0jm0iuPwHLm93LVnbmlbIxek:VI5HtwoLPpLk90q4k4VoCN

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72574e05645adb10cc972a5147145ba1a80346f44e34971f437f3fc77ffb1788

Files

72574e05645adb10cc972a5147145ba1a80346f44e34971f437f3fc77ffb1788
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE