58ec40bc65548995b55ce93c0ab3de1e04d97808628cc79d88899d0b55857679 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58ec40bc65548995b55ce93c0ab3de1e04d97808628cc79d88899d0b55857679
Size

434KB
MD5

d963da2f7ead3dd21f33406704ed184e
SHA1

3890c48ae697b41ce33fcab95d4e0562f59bbfb7
SHA256

58ec40bc65548995b55ce93c0ab3de1e04d97808628cc79d88899d0b55857679
SHA512

8f0aafc3cc87f573d26a759fa45c7b504f90e294cd2876ee029650a5f7c7b3e9173ebc724cb64d4ec46afc8d9dded093ec81279c05c5d483ea78d981f6b9a8f8
SSDEEP

3072:smVW8iTX/3Rfl8Xq1+0cxxsWEL02fXcIp08Moe9DESZL/GJSni2vG:tM7jJljxYTHYZM1vC7

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58ec40bc65548995b55ce93c0ab3de1e04d97808628cc79d88899d0b55857679

Files

58ec40bc65548995b55ce93c0ab3de1e04d97808628cc79d88899d0b55857679
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE