cc53ad486bb6910392d0a796eb581ea3b7e8a79bee65fb7ee31e715215099737 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc53ad486bb6910392d0a796eb581ea3b7e8a79bee65fb7ee31e715215099737
Size

27KB
MD5

6d488c3d24abd5e3709a7508511e4c9d
SHA1

04ae3d128a26b8ff9177718f2694175163a8d440
SHA256

cc53ad486bb6910392d0a796eb581ea3b7e8a79bee65fb7ee31e715215099737
SHA512

c4761edeef6131eb03633217c3f58a09dc9a88b6079251c2cc48d23acd9fa663d3ef2e7dd1878ffe1b2e7b719bc28d3e477fd9166ac787ebd302f4a89799c690
SSDEEP

192:FvxJqAPhpeS1ZK4O3CDHLJXzMZlmvl10GPdYPmVI+tTpXu7V80UqU4ubvRxK:LUAPkiMZlQ5P6d+tTZCv64uFQ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc53ad486bb6910392d0a796eb581ea3b7e8a79bee65fb7ee31e715215099737

Files

cc53ad486bb6910392d0a796eb581ea3b7e8a79bee65fb7ee31e715215099737
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE