e58832ee38eb3243051e1327a15349b53bb72b3c084a34f91663b558514f3318 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e58832ee38eb3243051e1327a15349b53bb72b3c084a34f91663b558514f3318
Size

481KB
MD5

c84a53940088d5cc0b7ab52ca582687a
SHA1

31d7e2cf4de0457c3ff9a5f0fa834c8dc4948a96
SHA256

e58832ee38eb3243051e1327a15349b53bb72b3c084a34f91663b558514f3318
SHA512

96e77bcd7b6308d5eb3c32c55f5e78f2b5908ef67f1de991c24bfcebf29cca0c339fee94e9b339cf7b4cc11b4b19213884e34f444deab7ebf6ed394ea66a12f4
SSDEEP

6144:2dspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqO:M8kxNhOZElO5kkWjhD4Ay

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e58832ee38eb3243051e1327a15349b53bb72b3c084a34f91663b558514f3318

Files

e58832ee38eb3243051e1327a15349b53bb72b3c084a34f91663b558514f3318
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE