533f2d574a8c7834dcb9d7b3480c9a8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

533f2d574a8c7834dcb9d7b3480c9a8e
Size

50KB
MD5

533f2d574a8c7834dcb9d7b3480c9a8e
SHA1

2e84b23146c58b79dfe5a48365ee447738ad0af4
SHA256

8686ae1bf5a931f909f706dce8ec9e16c5970ac768dfabfd13a057df68c53256
SHA512

9a3e780a89f261f8c1e2d9e503bb58dcd02c3cddf0e7c6ac231b48191dd60927478c68bdb13038ac06aab9827a73439487c835d4b1ce879c84a61b2eb5c1bf39
SSDEEP

768:RQeMFfFkb5v1as0ERUpW5MgPCMgDFevhVQX9qSLGcKuw4PXne0uClvFBmOL9m4:iFNkVvrgWjC2vzQk4KJ4ve0FpFdL

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
533f2d574a8c7834dcb9d7b3480c9a8e

Files

533f2d574a8c7834dcb9d7b3480c9a8e
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.redwolf
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE