98ee522cc695fcc757a87ac2bd845468800de91d50940308da184b6ef8abfcb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98ee522cc695fcc757a87ac2bd845468800de91d50940308da184b6ef8abfcb9
Size

1.9MB
MD5

31405b12d093501a4ee0b22fa7f1b7ab
SHA1

6c770a71aad3eff503e40a855044c59fe47beb05
SHA256

98ee522cc695fcc757a87ac2bd845468800de91d50940308da184b6ef8abfcb9
SHA512

43fa9d2cdea874bb3541b2f701028cbc39184172e5a3550734f45057bfd5dc68c6a870de6affbba2f765102fb20723ee48c42f7acbd509bf2214713811765c4a
SSDEEP

49152:lSWse/19ZFz1Hd9WQJ780i9lrTb5mEhi+jvw2deSMG6u:lSQrv9TJ780chTNmUTdeSx6u

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98ee522cc695fcc757a87ac2bd845468800de91d50940308da184b6ef8abfcb9

Files

98ee522cc695fcc757a87ac2bd845468800de91d50940308da184b6ef8abfcb9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE