884b01962769024ff1133742a3c9beffc162b9be65a15e5d4c17de26b931b73dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

884b01962769024ff1133742a3c9beffc162b9be65a15e5d4c17de26b931b73dN
Size

709KB
MD5

2d2dbe5f8fe185e05bc818109c7cbe00
SHA1

677287cd1e7c31f2b41b101328621d96fba87db9
SHA256

884b01962769024ff1133742a3c9beffc162b9be65a15e5d4c17de26b931b73d
SHA512

7aa06b918aa2312550d59727d25adf05dbf1178dd3ab820d0f74f03ff6a05825286951ee11a5ac81d4f2b17f24ddb6052477c1233a75c1be0d29820a86e80d53
SSDEEP

12288:VQt5H6YP4Jbh3tspELFhHS36FLXL652/jlkeOI:VI5H6h9HHSKFLXL6sOI

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
884b01962769024ff1133742a3c9beffc162b9be65a15e5d4c17de26b931b73dN

Files

884b01962769024ff1133742a3c9beffc162b9be65a15e5d4c17de26b931b73dN
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE