b054d4a569d5ec59205a3692c1bfdf495df9ed58f0a673450913ddb6299b06b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b054d4a569d5ec59205a3692c1bfdf495df9ed58f0a673450913ddb6299b06b6
Size

681KB
MD5

6aa7e72f831bc1c03f66bedd17da9763
SHA1

53c9d85822053457d8bc72b7d4b2a2585959cd46
SHA256

b054d4a569d5ec59205a3692c1bfdf495df9ed58f0a673450913ddb6299b06b6
SHA512

2571ff4123cdeed5e9037209243c5c20c908613cda2ce239f9bb88c57ac02b74838206bd7a2c48b830749e20e50a89893a6c04dab50bc441938444c3a2478cbf
SSDEEP

12288:nZfYZvaJUDT5Lv64uT9oTVsZADIlK9+Sar1PzCqCF/SQ0:ZyvaqDxvuT+TVn+SC6EQ0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b054d4a569d5ec59205a3692c1bfdf495df9ed58f0a673450913ddb6299b06b6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 413KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE