b6366253f325324dfdee65a3e3992f8a55d68e44870e8d5e0879d42c088018a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6366253f325324dfdee65a3e3992f8a55d68e44870e8d5e0879d42c088018a7
Size

5.3MB
MD5

3e8e2547d5506a7825fbb78ede52c5a8
SHA1

6fd737aa905bd330ac4832ae7bd4c71e8544d9d6
SHA256

b6366253f325324dfdee65a3e3992f8a55d68e44870e8d5e0879d42c088018a7
SHA512

305d081d46c644a0b4640467dae1f2772b9fb37bf3fe67a132450464f398e3d9251189e813213b2dbf833996de47fead93d8c5743f6079929e4afca176854f07
SSDEEP

98304:fW6gNOLCvAR5/jMTeQPUKHJZhj5JNtMa+ZilG45rBHH/deWeUJ2:ta+Z2VeTz

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6366253f325324dfdee65a3e3992f8a55d68e44870e8d5e0879d42c088018a7

Files

b6366253f325324dfdee65a3e3992f8a55d68e44870e8d5e0879d42c088018a7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE