5aedb361285cc3aff3853bd9f540eb05fbbf775bcd3099ac8504e9a665c996b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aedb361285cc3aff3853bd9f540eb05fbbf775bcd3099ac8504e9a665c996b5
Size

5.2MB
MD5

8b3080ba29d9d4c4fb3ce89a90defb06
SHA1

558abfc9ce7b58ff20349cc5d4a38a6bc19f1e16
SHA256

5aedb361285cc3aff3853bd9f540eb05fbbf775bcd3099ac8504e9a665c996b5
SHA512

8d21da1e9b9b8985504b4282348c11a4215a70fe653825bed01054167ee720a983769b4107335c10746c6fb82ce77ae3e7c37a481e72fe086c61b3c5df46716b
SSDEEP

98304:DhC07A0POUWfa80bU3WvpHhPNlH3tULk2Ek:lC07Qv/qVplHC

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aedb361285cc3aff3853bd9f540eb05fbbf775bcd3099ac8504e9a665c996b5

Files

5aedb361285cc3aff3853bd9f540eb05fbbf775bcd3099ac8504e9a665c996b5
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE