0a29dc04d26165428ffa85aa2adbac1bd0719b80b60c606cab442595feb53274 | Triage

Sharing

General

Target

0a29dc04d26165428ffa85aa2adbac1bd0719b80b60c606cab442595feb53274
Size

29KB
MD5

b66ea205f40fb3eb92ffdfc5f1435076
SHA1

c161a7a467ab30a8cbf7d48d7973d80ba1c7b757
SHA256

0a29dc04d26165428ffa85aa2adbac1bd0719b80b60c606cab442595feb53274
SHA512

0abfa2efad9de9922904fed0a6d0789ee91456954d23bbed959d5add8063c3856770ff76f0d72a50886beaa1724c337e28a13628e94952373b10a1609db98d50
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/QQ:AEwVs+0jNDY1qi/qh

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a29dc04d26165428ffa85aa2adbac1bd0719b80b60c606cab442595feb53274

Files

0a29dc04d26165428ffa85aa2adbac1bd0719b80b60c606cab442595feb53274
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE