000049b565a9253ec779203cfade2555 | Triage

Sharing

General

Target

000049b565a9253ec779203cfade2555
Size

1.9MB
MD5

000049b565a9253ec779203cfade2555
SHA1

866a6b85b44589f5e91e715d1fb461dcce8df53a
SHA256

7cbb42f7ad746f99f287c5fa37af3523ffba3761edb8b052268fa6b708c11a19
SHA512

f7a0735545fcfbbe385b9272f24d93b21341fcbd9bc378cee6ff95ba92b88af03690a1708930dbc35e1a7a4ae58df387370b1571f887fc9787b84cb1c4e19cc9
SSDEEP

49152:sqfhfFU9oHcRm1donhMUQUiidPpfbVNdNE8JL:VfhfOXR5uG5pfHdNE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000049b565a9253ec779203cfade2555

Files

000049b565a9253ec779203cfade2555
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE