5b85099b813b6b7d2be7c9d7029242f9078751fcfc7efc3089a9438f78673c89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b85099b813b6b7d2be7c9d7029242f9078751fcfc7efc3089a9438f78673c89
Size

545KB
MD5

63aed09e20f9ff2175d2a4da26a43445
SHA1

952658eb4c7e206d8e44839b5c80ed65c4e95ef9
SHA256

5b85099b813b6b7d2be7c9d7029242f9078751fcfc7efc3089a9438f78673c89
SHA512

526d6a10f355d41ea198d176a56e60484cb5619aac165e3b1e17b718f104ac18e0fe52fe8109c0df956b577fdb1454b03a735ac16f5bf317743034cc438d27b1
SSDEEP

12288:RXbuSCoSblQ8fXEBvuwjInnLEzRi+DPaGF:hzAhEBWwMLgiSPaGF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5b85099b813b6b7d2be7c9d7029242f9078751fcfc7efc3089a9438f78673c89
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DuLw
Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE