5b2fb8c3b6c8822be5c9fa176cfec702c09bf96f168f27a64f955db17ccf81b9 | Triage

Sharing

General

Target

5b2fb8c3b6c8822be5c9fa176cfec702c09bf96f168f27a64f955db17ccf81b9
Size

99KB
MD5

4becde7db0aa9f128300deb5a1fadb82
SHA1

d3ec30b0cbbc2f428bf102c5dafcc51b23742233
SHA256

5b2fb8c3b6c8822be5c9fa176cfec702c09bf96f168f27a64f955db17ccf81b9
SHA512

0eaa979204c2528517af1be6b8dea8fa4fbb15bf6ce041ef74535b8bf41eca43767593f9f1c9dcef2cddc28621a368bbefd391ffbf2faa00da65e6c05d3ac39a
SSDEEP

768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyt:CzqsQ5PIt4+/yfeB6r6YcOik5h36lO

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2fb8c3b6c8822be5c9fa176cfec702c09bf96f168f27a64f955db17ccf81b9

Files

5b2fb8c3b6c8822be5c9fa176cfec702c09bf96f168f27a64f955db17ccf81b9
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE