5d42214e4f0f68171c8eae253799993f0d7104a5ad6fe9df6dc60239338b422a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d42214e4f0f68171c8eae253799993f0d7104a5ad6fe9df6dc60239338b422a
Size

6.9MB
MD5

84fc2125c588579879a84bab1b8a8ded
SHA1

6653e22165cbc6d2bc8fa3b3bba9d6302ecc835d
SHA256

5d42214e4f0f68171c8eae253799993f0d7104a5ad6fe9df6dc60239338b422a
SHA512

7c03b62270ba544d4da19ed0dafdf575ea07b61408ad672464df7f7cf278023e8310b12ae23c95688bbe4d376e33fa1d9194670865872eaf688f5fa34beea0c8
SSDEEP

98304:oub27fjklG42HUa4oHU8Ja9BAMQIvJ0Cd/C5jKRbAlgQWOvBJBAUZL:ojfjv5PgAMQUJ0s/CWAeTO5JV

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d42214e4f0f68171c8eae253799993f0d7104a5ad6fe9df6dc60239338b422a

Files

5d42214e4f0f68171c8eae253799993f0d7104a5ad6fe9df6dc60239338b422a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE