5b1b88e8518aad16da9d3d1c329b4d0fa8a716f66cda2e9dc3869e96d4bae707 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b1b88e8518aad16da9d3d1c329b4d0fa8a716f66cda2e9dc3869e96d4bae707
Size

42KB
MD5

9a1762cc856d629c79ff43a8ed188643
SHA1

a5bb3dac8c9f1673ca68e61f1e34a8de83f0da5b
SHA256

5b1b88e8518aad16da9d3d1c329b4d0fa8a716f66cda2e9dc3869e96d4bae707
SHA512

c5cd75e5cab7cadc936f4da9186e5375d78f6bcfb1894d4be02512bf7a1b3ecdebb1a266d335600e808fca1a1b0bf815d81782e4d748b2f8b84da2eee5239929
SSDEEP

768:Dy3uz04ez37WrQK2+ngNfhD1r1236YEzGO4Gt0z0XV+qCb7dnYUeIVt9rpr2:66TEW0AngNfhe3ti4GtScihYWl12

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5b1b88e8518aad16da9d3d1c329b4d0fa8a716f66cda2e9dc3869e96d4bae707
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ