5d9461c16fbe4b7e7fb7142505b0f738ab3e1fe93c4b762e3a96f55c023217ad | Triage

Sharing

General

Target

5d9461c16fbe4b7e7fb7142505b0f738ab3e1fe93c4b762e3a96f55c023217ad
Size

22KB
MD5

487d8f023a1ece2cc88098fd219f0a40
SHA1

6b6d8eb7f62682337654b86a56382c1cb2a857aa
SHA256

5d9461c16fbe4b7e7fb7142505b0f738ab3e1fe93c4b762e3a96f55c023217ad
SHA512

058798c6f380dee48302e5c820078a55f34bc745a384b28823c72ca062671e70ead3f12ba3cecffed6a836bac552e599af9aeda602941a0d8978e0e5daf44d94
SSDEEP

384:dykBpbi8bcji30d1BCT/ob/xDbH580i02Jd+mSd+2Fo6zE:Mka+3sCT4ju0i0++E2+6z

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5d9461c16fbe4b7e7fb7142505b0f738ab3e1fe93c4b762e3a96f55c023217ad
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ