b56e3e581f4c9db9aec02a602aa1f1d6 | Triage

Sharing

General

Target

b56e3e581f4c9db9aec02a602aa1f1d6
Size

324KB
MD5

b56e3e581f4c9db9aec02a602aa1f1d6
SHA1

355e18e51eb5d4a84800bbbf3faa256eb917db54
SHA256

7851b32ef6243ad9ced08dcbbdac836ebdbf4dbf7b2dee78fb3fff684f78f0b2
SHA512

4bcc2d47a7aca1294a6307dccd50a05364db93adec7da57d0dfd2604ac4474b1e056dd978e5adbfde867b66728aba3d888424739dc5019a9db6cdae613da530d
SSDEEP

768:CzTPS0gqep+efuy7cjsJQ5L6UnxeQ4Jpgb1m9mHnuE7oQqFzf/DIY02Al5Dj4Y2:YjS7qI+efuy7kn5L6MvB3KzfrIKA/jF

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b56e3e581f4c9db9aec02a602aa1f1d6

Files

b56e3e581f4c9db9aec02a602aa1f1d6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE