5ca53f6a93c1064b42e29a42f25e6297c0e561d4f3c421132793f0f92d4709b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ca53f6a93c1064b42e29a42f25e6297c0e561d4f3c421132793f0f92d4709b5
Size

29KB
MD5

4374a3e9f100661f84194ec19c201e50
SHA1

cfefc844470d0a4be7a0b4fce12e5d06ab2ca653
SHA256

5ca53f6a93c1064b42e29a42f25e6297c0e561d4f3c421132793f0f92d4709b5
SHA512

3992844a8d7a7c0db5cf6fae2b5cdb385b543c872095c6c7964bcb0b0b55850a9956a3cd59aa8f7438a1a05bc23349a012a7d8156554f1c4fdb8f1dfb1cc47ec
SSDEEP

768:aSep2QwDAxCax5RG3pWzLnRs+pcc6kkpafiehoaFF08UH:aBpjwDRMrvG+pcc6kk8vhoCm84

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5ca53f6a93c1064b42e29a42f25e6297c0e561d4f3c421132793f0f92d4709b5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ