55fe58d8e95dee5b3bac1240b52377ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55fe58d8e95dee5b3bac1240b52377ad
Size

24KB
MD5

55fe58d8e95dee5b3bac1240b52377ad
SHA1

d01f1bf245aced3344f5e49d8814e9b307296e92
SHA256

e7ae47e7469f3c4d29818bc23756aa6d2da452f754f5226e074b714dccce9dc4
SHA512

4e4b97ccb3a402c2eb6ca9024f8e68d10363520a5dac49c87361844aa807582fb11d8c38d815bb92ce2a7f22317f6f0ebb6c17cba8b72a76df59a9f81c372198
SSDEEP

384:a7R0TK023b++B3RCStnS0AHyJ0VPouREy/bUeCTRZXttb0JVMQEN/Q0lOSr:A8fcb3PtnS7yWRlTeZXttQsG0

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55fe58d8e95dee5b3bac1240b52377ad

Files

55fe58d8e95dee5b3bac1240b52377ad
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wtq
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE