5fcbfba6fd342cbad6bb760be41e0f0ae2c653792151c4205d9b86184ffb54cd | Triage

Sharing

General

Target

5fcbfba6fd342cbad6bb760be41e0f0ae2c653792151c4205d9b86184ffb54cd
Size

843KB
MD5

69b1bb17ac433ea2f1a8b9ab93c102f0
SHA1

e7b5ffbfe877a2cb520b29ff51f7478df7ed0c32
SHA256

5fcbfba6fd342cbad6bb760be41e0f0ae2c653792151c4205d9b86184ffb54cd
SHA512

6076005f260de176f82933d86c7696d4062265de6008d4d6e623873ff338156cd6f94c9bfb83483b2444ce7e3d134bde613974d4007f395ad80955f648d65b9b
SSDEEP

24576:r19gV3Jme5FJjs2T2kW7rsiF86nwR1IsOM4j4gB:xKV3JbzakGIiF8mwR9ON/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5fcbfba6fd342cbad6bb760be41e0f0ae2c653792151c4205d9b86184ffb54cd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 976KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 665KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CUPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE