5b63d8ad4eccdb96a3fc51fd09a46508 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b63d8ad4eccdb96a3fc51fd09a46508
Size

92KB
MD5

5b63d8ad4eccdb96a3fc51fd09a46508
SHA1

9d0c0d4c23cda2aeb5246f41ecfa3030efa8b560
SHA256

05fd057ceaaa0853cc21fe3843c447a2eb92635fead4e09da05112bbaa83de1f
SHA512

dbe419b394990bb27d2a48b7897c6aecfcb68e5a835b032ce7abb980fc59277aa75404e26f3b362823979d0a7adb14240502e132fb163a9e341bb43ed24cc076
SSDEEP

1536:V+jDCKJgKtxMJ/hgt1z6mE9R3Wn3DRx4XQRXA93T/IFg10/9TMn2bqRHCTbJ:cCKeBJ/hzmE9dXyA98g6LbqRYbJ

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
5b63d8ad4eccdb96a3fc51fd09a46508
unpack001/out.upx

Files

5b63d8ad4eccdb96a3fc51fd09a46508
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ