53bf978bd7a5c20cb0ce9f634415bf13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53bf978bd7a5c20cb0ce9f634415bf13
Size

924KB
MD5

53bf978bd7a5c20cb0ce9f634415bf13
SHA1

2912912126d24ae1896c3b46676ea667e10d3931
SHA256

9392489f8a62ea6ffad6749914929405db41e141d297601bb8151c1ae603063f
SHA512

6b83464836dfd355ce7c1d8006037dbd50226fdb48013777ee28b040ced7f47a22840c2245cadd1a7de70c90b338bd0f526a4032517af4cc1296d3ad8b83f755
SSDEEP

24576:CGRcLpUdRkf20c6qSx3knU04vBKrZjdXwmo4:CFpkIknPu89BXwu

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53bf978bd7a5c20cb0ce9f634415bf13

Files

53bf978bd7a5c20cb0ce9f634415bf13
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE