5bddcbda0c8ff557cab08b33eb1ccb0562867e090b754753cb8abc559ab8a108 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bddcbda0c8ff557cab08b33eb1ccb0562867e090b754753cb8abc559ab8a108
Size

998KB
MD5

57f57ac41382b57c8fc664046f280d00
SHA1

bd66d4fedd2ba0477cec3ac809859329405b2abe
SHA256

5bddcbda0c8ff557cab08b33eb1ccb0562867e090b754753cb8abc559ab8a108
SHA512

a8939a67bfa5556bb4b32d30a76993d0a585ccbb93bf3f61307bc53b25ee06599f6bb1a42f07661a3abc9d138ecb3ee593814d6ce57849c6c75442a7a5964e68
SSDEEP

12288:LHz/NcAnUTWFIMYohVrVQUKVyi2GvJ15LsZeaf1c6OfLqbWBT0swozwE0+w9FhSa:LBcAUTPwTQUYZXhfObiiAwamKDcty4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5bddcbda0c8ff557cab08b33eb1ccb0562867e090b754753cb8abc559ab8a108
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 472KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 342KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EUPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE