cf20fa96f873d2432c3f6e798c1a4abcbe78146035abd9d27e805f32dc319284 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf20fa96f873d2432c3f6e798c1a4abcbe78146035abd9d27e805f32dc319284
Size

81KB
MD5

2d30b6d3f67e7ff9d3bec2b21a3d67a1
SHA1

c14e8f107af00d5a86a8fcb0ac0bd3380141d1d0
SHA256

cf20fa96f873d2432c3f6e798c1a4abcbe78146035abd9d27e805f32dc319284
SHA512

44dab3aba8f3567e8389be503c2ab41d0e6bf04b2dd7e53de9133a5f88863e9f733b9ea5c9d2673f671c9d9fc6e4135bfd9903c9ad1a07d795a4e277a166a499
SSDEEP

1536:a7ZyqaFAxTWH1++PJHJXA/OsIZfzc3/Q8IZWJZjl:enaypQSo7ZWJZB

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf20fa96f873d2432c3f6e798c1a4abcbe78146035abd9d27e805f32dc319284

Files

cf20fa96f873d2432c3f6e798c1a4abcbe78146035abd9d27e805f32dc319284
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE