a5a41b21fa953bdcdcbe5826afc285eaa4e62abd373edd840b3f68470bd3cae8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a41b21fa953bdcdcbe5826afc285eaa4e62abd373edd840b3f68470bd3cae8
Size

324KB
MD5

cf03bbd7a574e741c14f2dfe44d19fee
SHA1

4b59e8c7c645d1d4d8e8ceebf1588c9ee0bce264
SHA256

a5a41b21fa953bdcdcbe5826afc285eaa4e62abd373edd840b3f68470bd3cae8
SHA512

39468353bac4a289c4deafb1b6f74fb8e31c9df46bce87d7937c2890825af716f1af52b3c51b6030a7b05199fe161fae4dc0fcf1d9d8095b703122741b7f60bc
SSDEEP

6144:YhbZ5hMTNFf8LAurlEzAX7oEwfSZ4sXtzQI6F3:2tXMzqrllX73wWEI6V

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a41b21fa953bdcdcbe5826afc285eaa4e62abd373edd840b3f68470bd3cae8

Files

a5a41b21fa953bdcdcbe5826afc285eaa4e62abd373edd840b3f68470bd3cae8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE