ad5a25422c6b086c6e3a397524a69af46e6d9b8f6e615c20a594b750efe99fb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5a25422c6b086c6e3a397524a69af46e6d9b8f6e615c20a594b750efe99fb6
Size

239KB
MD5

d687e05e60938dcd87e2bd7c4275dbe5
SHA1

9d3e94f43f71429ff3512f4622b1f9ce9464af7b
SHA256

ad5a25422c6b086c6e3a397524a69af46e6d9b8f6e615c20a594b750efe99fb6
SHA512

36aa1ff55f04c0b4a81b45f51fb32663416676a2164881ce3d6e8a126e3de5bb500330806ed7a184c10b588969848b728e819ec000cea4397da004d2bdd1b3c4
SSDEEP

6144:reEkJ8qgX/bwMb28m0NLDsTK93K7jtAJgeF+:zODgXTwMb2t0N0tQ5+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ad5a25422c6b086c6e3a397524a69af46e6d9b8f6e615c20a594b750efe99fb6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 324KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 187KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bjdtx
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE