538e9e2c84d8aaefb12e01490f2c0335 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

538e9e2c84d8aaefb12e01490f2c0335
Size

294KB
MD5

538e9e2c84d8aaefb12e01490f2c0335
SHA1

a54e12cf7402337929d59273fd352d91e211090e
SHA256

5ca7df40d1f987cbe80171ea83f7b1024ebe04d04721546d48ca587d63d8f7ce
SHA512

4bea0618c869e4932e45075bcfc179c97d87cf5d04112321fdc008d37096dd59f4a5137b728ff662b6e02e7cfd863c29bf23448bd2f74d8052717f2ede199b89
SSDEEP

6144:SbGnlvftUPPvOXW2Q499NDf5TRayexjtRJjBDYtRw9TuB+wo2echDAx3Ko/7oS:SbGtfOHmlb9nT+JhdTiU2e4oBoS

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
538e9e2c84d8aaefb12e01490f2c0335

Files

538e9e2c84d8aaefb12e01490f2c0335
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 287KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MCTeam
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE