52b153651c7fb32b6cdc951aa78cfef8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52b153651c7fb32b6cdc951aa78cfef8
Size

115KB
MD5

52b153651c7fb32b6cdc951aa78cfef8
SHA1

0f64b18d55d66c5bc4254118c806d21287c2ebc3
SHA256

a8c78783e2ee23b8cc74d44f212b48e1f6f8de11e4f723290fddce79ea312535
SHA512

3273a2e5754edda43d48b989354bdcefce7abb811cc3608f6e57ac93d158833f1c907056f0a5ceb71ebb58efa9a4bd83fa0f7fe2abcedea26a2769d2ca6b9024
SSDEEP

3072:SKcWmjRrz3ZKcWmjRrz3OZIliy7KDX8fUu5Qz:hGyGWIQsPxQz

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b153651c7fb32b6cdc951aa78cfef8

Files

52b153651c7fb32b6cdc951aa78cfef8
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE