5290546530f0c12d1a197a894ea7a5359f48b176df0b8fc816e5957f07ee9294 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5290546530f0c12d1a197a894ea7a5359f48b176df0b8fc816e5957f07ee9294
Size

467KB
MD5

7cb7c371a7d190b4a8a4525b39a5d737
SHA1

86a54571b6f2cfac90866e97243d6e0bd39f1f34
SHA256

5290546530f0c12d1a197a894ea7a5359f48b176df0b8fc816e5957f07ee9294
SHA512

bfdfa808d34a8b575c9f96640d0c9a5460c33a2e2cca1189a25a7447b0d2861beffa6f5ee8688f16d59d506c6043376f6ea850e59adc398bab8097826a6e9c3e
SSDEEP

12288:PjkArEN249AyE/rbaMct4bO2/aPolR+G56WG3X9:8FE//Tct4bOs+olR+g6WG3N

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5290546530f0c12d1a197a894ea7a5359f48b176df0b8fc816e5957f07ee9294
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 468KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE