58d0bd79fec64df68aac9e9b895c0dd148fc1e990d3549def8ca605bcdd030cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58d0bd79fec64df68aac9e9b895c0dd148fc1e990d3549def8ca605bcdd030cf
Size

78KB
MD5

4bb94531e8725f83e73be72b9597d89e
SHA1

7e334c69a6ab5939b4e2e615df961c0ba1e39043
SHA256

58d0bd79fec64df68aac9e9b895c0dd148fc1e990d3549def8ca605bcdd030cf
SHA512

9fa0dcf814b7f0b622d58fb9b2f8f56cb0a0f761b9aaf2ffec7201f6abe93c2ea29564dffb8835a3ac0098d8825d2b691ed43fccc9d9f4cc8d42ceb850bbd645
SSDEEP

1536:lIDZWlNkY/NAfAb42L0d9GJWaFSTjrQUHilSzw9Qjg1O:lI1WlVCRN9GckS/rtzCt1O

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

58d0bd79fec64df68aac9e9b895c0dd148fc1e990d3549def8ca605bcdd030cf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P<
Size: 238KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE