2555b2b6ca10e1a73fe310c40161f4b3 | Triage

Sharing

General

Target

2555b2b6ca10e1a73fe310c40161f4b3
Size

434KB
MD5

2555b2b6ca10e1a73fe310c40161f4b3
SHA1

64313a4999f9297caa94c814e78feb0ad8a2bee7
SHA256

54e316c02d8fc24245863b1b28bfcfec898363ba17fb32cd50526c1902677280
SHA512

474ead352d29b82f3a499f7601f0e6f17668fd4aa9806c70fdf0a1825ee96f4ccbe22a1773b0c6fd738202aae7714c04d13f93c3436c19773c5ad0895ffc4da0
SSDEEP

6144:gKNnTwABk3ZFno+T5OhN42eqaEeWg6cXxwmt8j/D3vVO0c8kh0rIJppHoqrgguFB:pT5W33VQN4lLOyXaL80c8J+Hoy2lL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2555b2b6ca10e1a73fe310c40161f4b3

Files

2555b2b6ca10e1a73fe310c40161f4b3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 281KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.2UPX1
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE