00c3aac2cfb6b553e72d48f3dcdbf853543f772211ca25acd86552d025d05029N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00c3aac2cfb6b553e72d48f3dcdbf853543f772211ca25acd86552d025d05029N
Size

101KB
MD5

d54a41c5c8ad5d57ae40fbfa567468f0
SHA1

de2b17c25ad10c857aeb65d7caa5cc6aaafe982a
SHA256

00c3aac2cfb6b553e72d48f3dcdbf853543f772211ca25acd86552d025d05029
SHA512

c78e7c319097b436539c0579575499d10c3ca55c260d22bc0bd629fc4034225f92b23d1fd286d20aef1b9e9f698f23c8a54ed31aaeaa56d8aa99a19dcb679a70
SSDEEP

1536:V7Zf/FAxTWoJJ7TPUr8WhvWlhe+eztEJeGKc3r+hGjPSrJfDV:fny1zURv6wxEVryGjuDV

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c3aac2cfb6b553e72d48f3dcdbf853543f772211ca25acd86552d025d05029N

Files

00c3aac2cfb6b553e72d48f3dcdbf853543f772211ca25acd86552d025d05029N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE