5e91a7b6f3e6e74b2528b5df2f65e4596930dac063f36960d8ab26a957c6bf94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e91a7b6f3e6e74b2528b5df2f65e4596930dac063f36960d8ab26a957c6bf94
Size

768KB
MD5

1b8cd82abcda60c4cc9a810973016790
SHA1

46e6fcb6212aefac5654aeb5736e0bf24457d4b5
SHA256

5e91a7b6f3e6e74b2528b5df2f65e4596930dac063f36960d8ab26a957c6bf94
SHA512

ad4d285f0adce29f4678f954a4183f2a26577b42b67e88dd39b3e78038307ccae399d773ec374d7e5270a34be3cef78bbc54d2afbc75a91e9d56627fa939d7ac
SSDEEP

12288:jt0VPFfsKAkrbPlXhHANUTNq+TmHANUTNSG:SFksb1AqG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5e91a7b6f3e6e74b2528b5df2f65e4596930dac063f36960d8ab26a957c6bf94
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 796KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 153KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rol
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE