cad32532e02c21f8ec594f3daed49748fb20aec65f5650541a11b9e052abd67c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cad32532e02c21f8ec594f3daed49748fb20aec65f5650541a11b9e052abd67c
Size

82KB
MD5

1efc56de9f1e39db91fbf06da00007ee
SHA1

0993165e4caab14b42cac619444caa3fd5fcbff8
SHA256

cad32532e02c21f8ec594f3daed49748fb20aec65f5650541a11b9e052abd67c
SHA512

db29b440ac33ae722059871f785143c3219b3f02a979048cc281e4f14fa75b44c5e6b440fc3f1fe5df8623ea1b78c329739163201bfe9c9080220fe3888b62e4
SSDEEP

1536:NAoUWD/1iQ3QAHylDFu5aa+ASnAhui2YMhQSr7WjMNweqGd5f75p:GoDDctAHylDFgFVSnAEi0/PWjMNweNdV

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cad32532e02c21f8ec594f3daed49748fb20aec65f5650541a11b9e052abd67c

Files

cad32532e02c21f8ec594f3daed49748fb20aec65f5650541a11b9e052abd67c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE