54dd66b689e320e2963e66439d3568cb8f39349c1ade81c9827ae897eb38f94a | Triage

Sharing

General

Target

54dd66b689e320e2963e66439d3568cb8f39349c1ade81c9827ae897eb38f94a
Size

148KB
MD5

099e6029c625401f7b2b93c2029f8cda
SHA1

9062f1e6fa0e446002fcdfc306fabe9cca792652
SHA256

54dd66b689e320e2963e66439d3568cb8f39349c1ade81c9827ae897eb38f94a
SHA512

575d599d3da10ce8f472c58a001c0e32ccdaaec580bf1bf305e5528a1ad9c5cfd91addeb7e7a0bf49e2bc07765843cdaf456f5aa0881e28b8c1cfd8b8718f803
SSDEEP

3072:E1/Bg7rshe/f0ljjLomq93mP6HvgIxcIxgIxcIxgIx36trJe/crDDxw++kY:EZOsg/f6jImq92PQvgqcqgqcqgq36tlg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

54dd66b689e320e2963e66439d3568cb8f39349c1ade81c9827ae897eb38f94a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ficken
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE