5477ae9f3a54d57866defbca292f3046 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5477ae9f3a54d57866defbca292f3046
Size

393KB
MD5

5477ae9f3a54d57866defbca292f3046
SHA1

9de1d1fd01997fa780ca106c0482669dd0ce0436
SHA256

e8f3dde9890272ed76b82f31e3dbfe211d324cf0cc92e52360887fdfff0cb2b0
SHA512

f5ea90937f983acfaa3a94d70dc5f81f13b6e1d2fff86c8707ebacad38774d4dceaeb655209126bef7a11ffc5f64cee7fd980a60b5d72d59a1a2749706c0c6fb
SSDEEP

6144:3qAWq5fKQE0wJFi4bA1SeCrE/5j4c+lgxxf0Sr/yNMziT/VSr/hlBaOLRe87H43c:L7XSE3f0SrhijAaO6M

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5477ae9f3a54d57866defbca292f3046

Files

5477ae9f3a54d57866defbca292f3046
.exe windows:4 windows x86 arch:x86

573e37349d0bbc0737fb89bdd5e4e0e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
AllocConsole
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
ctime
exit
fclose
fflush
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
malloc
memcpy
memset
perror
signal
strcat
strcpy
strlen
strncat
time
_sleep

user32

FindWindowA
GetAsyncKeyState
ShowWindow

ws2_32

WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket

Sections

UPX0
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE