5be609375faa67469b289f257af8a5c9d5dc56fc444413828d3c59d2f2519b06 | Triage

Sharing

General

Target

5be609375faa67469b289f257af8a5c9d5dc56fc444413828d3c59d2f2519b06
Size

580KB
MD5

298a7bb14964164ccf5aa618d05a8f14
SHA1

e77c1ff60100d5cab554166a4c7a00003e2d67e6
SHA256

5be609375faa67469b289f257af8a5c9d5dc56fc444413828d3c59d2f2519b06
SHA512

f0c1c5a9080d263e51c647147ad21a1ad93d7f6fbfc7d25528a94c11a203d43728560ba41223a058a4f306455aaf6605c58477e967764b096564b01184afbe61
SSDEEP

12288:9958T4xvKAhrHQHjvchAbrgI9licSWMcu3RMJWjbq:9o4xvKAhf6UITkWMcu3RCGbq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

5be609375faa67469b289f257af8a5c9d5dc56fc444413828d3c59d2f2519b06
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 740KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 341KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ