53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f | Triage

Sharing

General

Target

53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f
Size

54KB
MD5

50e53cb632227fcdac63a9691a538d7c
SHA1

7e6310c34c8b2b2e5bac58914b7273efe04ffbae
SHA256

53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f
SHA512

8b5ab4764c13d4edf72a218f3a14399c857f1fa8a0793d55665e292e0b42deabe4b85e5b6442623d527c7b09e70ae6004a88f0d1e79dc0dbde59fccef71e2398
SSDEEP

1536:qJ0CFdOpROE4qb9cIbzB8qhPgZ64/vR07ZwIOiU:q2pGkrt8qhPFivC7iI/U

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

53a2d03b4548e56b4ed3f169e8c31ccac1a006def6bffda516ef9c4bd7b9fa3f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ