a7ab3e1c4f740fa81789a992bbfab6a8b5335d0826c3606bb1c61037dc413bc5 | Triage

Sharing

General

Target

a7ab3e1c4f740fa81789a992bbfab6a8b5335d0826c3606bb1c61037dc413bc5
Size

29KB
MD5

22ab70c36c2c3b61cd386a3bc65d3075
SHA1

115437e501f71a2a8642d81f9adb40e1e17d4cba
SHA256

a7ab3e1c4f740fa81789a992bbfab6a8b5335d0826c3606bb1c61037dc413bc5
SHA512

da3a4925331ea056f212ea5bc3b43c9ab96412f7e1fdea7f9487006c6487d0e88972a3ff4231b48de8d48f87f796134a49561a4821a6df241a7f63090b9fe491
SSDEEP

768:AEwHupU99d2JE0jNJJ83+8zzqgTdVY9/Chz:AEwVs+0jNDY1qi/qaB

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7ab3e1c4f740fa81789a992bbfab6a8b5335d0826c3606bb1c61037dc413bc5

Files

a7ab3e1c4f740fa81789a992bbfab6a8b5335d0826c3606bb1c61037dc413bc5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE