58fe927ff470759290c0aa6ca4c4a10f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58fe927ff470759290c0aa6ca4c4a10f
Size

403KB
MD5

58fe927ff470759290c0aa6ca4c4a10f
SHA1

7b7925166873bd42a145114ed73a66e067337266
SHA256

a350ee55c2e096452211c4daa39220fa7ae32451fc89aa00a73cc1e4158b729e
SHA512

c8646f9a03fa7e0781fb1fac48c0dfdb6ba199ae736ede0d3e0c911240ab0cbba9400c5461b0b8915efd051dda35efa91e9f17303610aac8b20647ab76d18252
SSDEEP

6144:CmaKVBGmE84IMNv55giU0pKiFYHxfx15RvOagakZBxkTN2gmeGcFnVQb/DAYbDgN:7SmLAuEY71fviagATFmebVQDcYcB

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58fe927ff470759290c0aa6ca4c4a10f

Files

58fe927ff470759290c0aa6ca4c4a10f
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 370KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.heowr
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ern
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE