57ea5f6231cf3cae97d1c21657c25564 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57ea5f6231cf3cae97d1c21657c25564
Size

394KB
MD5

57ea5f6231cf3cae97d1c21657c25564
SHA1

b9a03c615d669850ebead65e348e18e5ca937a9c
SHA256

e6c1046b4a53778939d2dcc9c37143a4f16720188f1e507d8d99d7b813125e1a
SHA512

c47c91acd172838616b2afc1d7fbf0fc7492802914d3902f24f1d6be904a1db93be09f8e32784df036d6833035af6cb55343171dceba07e3b5ca96c1482df98d
SSDEEP

6144:joWZQb0WY0uRy7mtNzvkKLrlAWGrDyd0zFngTeNPGou87JlSzY:MWZQbLYtg7mnzvl+WGXySeeNu3enkY

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57ea5f6231cf3cae97d1c21657c25564

Files

57ea5f6231cf3cae97d1c21657c25564
.exe windows:4 windows x86 arch:x86

647b2d25b4821905b4195ff7a6455b54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

UPX0
Size: 512B - Virtual size: 3.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 385KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE