5e5ff14a402e27b2c69dd73238a6f1046d50818d28ac433300f412785ac5201d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e5ff14a402e27b2c69dd73238a6f1046d50818d28ac433300f412785ac5201d
Size

113KB
MD5

49a5207acaafd780894f2dd39336bfa7
SHA1

5d1e06f9d1c8af1a0a1746c04d740d8df8f0dab9
SHA256

5e5ff14a402e27b2c69dd73238a6f1046d50818d28ac433300f412785ac5201d
SHA512

9eb61d3c57bdddcbbb454db18372c88bfe094b790454ce66b526fb868378c1aa5955de448618d833ec30fca2c16891324612e09ec00a596208a4f07fe3c72192
SSDEEP

3072:j3KUpyUne6rGN3PWKRedUI/KO060d2GPPnOTn:Lp5eZPdDO0602GHngn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5e5ff14a402e27b2c69dd73238a6f1046d50818d28ac433300f412785ac5201d
.exe windows x86

d2825003efa8028f3f2ad5156a135980

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
__set_app_type
_c_exit

kernel32

GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoA
MultiByteToWideChar
QueryPerformanceCounter

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: 108KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE