52515a8ae48c311c0b0cb65a3282560027dbe13a7debd659e0ddfd034acd7f7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52515a8ae48c311c0b0cb65a3282560027dbe13a7debd659e0ddfd034acd7f7c
Size

363KB
MD5

6d7cb883f100024e3bf5ad68c4a2feda
SHA1

c0618517be39037738e75413123ae5e955a920bc
SHA256

52515a8ae48c311c0b0cb65a3282560027dbe13a7debd659e0ddfd034acd7f7c
SHA512

d8f501b9c4c6691a8acf3cddb638a384120032e6daac898ec9bb4921a11bc731cca5f758afb0157ded20420a7f2f5256033daf02ffe31ab9de03abacad255ae6
SSDEEP

3072:jZzIQZk9fN8RjurfgV9InNAjinwXZXwk2Y4CwXZTxVpv9sxqiRWAc1E+/og:jZkykQRjhVWnOswXVwvXZ5uze1XR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

52515a8ae48c311c0b0cb65a3282560027dbe13a7debd659e0ddfd034acd7f7c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE