404fac854040dc353931499a4126f52c1800503ecade5a0dc79e726769306374 | Triage

Sharing

General

Target

404fac854040dc353931499a4126f52c1800503ecade5a0dc79e726769306374
Size

313KB
MD5

2f879e96d834d51e2fc74710a551bca3
SHA1

7ce7d00b86aaab1dc7798b691b91eb8f67f9b7e3
SHA256

404fac854040dc353931499a4126f52c1800503ecade5a0dc79e726769306374
SHA512

521d2be4496996891464e10df1ec099de4309d4a2cd1016b14bd148dbe12516dc2e036d7c45603cd950867f472217fb08ac986c46387d63c085417e0b97c23ef
SSDEEP

6144:7qV54oUeSsMY3j0cI8rdYEylF2EHJ8Sj6vzHrh8wDVU3wMs9ZFWM:7qV5dU7oTWKYEEF5J87vzLh8aVJS

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
404fac854040dc353931499a4126f52c1800503ecade5a0dc79e726769306374

Files

404fac854040dc353931499a4126f52c1800503ecade5a0dc79e726769306374
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�^�uO
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE