48a4017f42c9008a48bbe65b10c4069021e874792af4c1e58ac53a2b97b5e05b | Triage

Sharing

General

Target

48a4017f42c9008a48bbe65b10c4069021e874792af4c1e58ac53a2b97b5e05b
Size

105KB
MD5

32f03cab5bcd76903a5653964d5f6db1
SHA1

ef9ccf5c13d0826520b7fb74e122ebfe8ab2a2b8
SHA256

48a4017f42c9008a48bbe65b10c4069021e874792af4c1e58ac53a2b97b5e05b
SHA512

cb47c7ccbcd5a6a9229035cfbb4149e1a1c00a55cbf89b7b0f52c6a4edf860bc6dd4405190e2fac841e99baa33bde2af90882fd20f8b410b3e3d5c974553c2bf
SSDEEP

1536:V7Zf/FAxTWoJJZENTBHfiP2JGvBJJGvBGaERT+G9v/e:fny1tEKaiFRe

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48a4017f42c9008a48bbe65b10c4069021e874792af4c1e58ac53a2b97b5e05b

Files

48a4017f42c9008a48bbe65b10c4069021e874792af4c1e58ac53a2b97b5e05b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE