54e262baac4e92cf83cb11b2fa9ae73c7e42d6f9ee95968e0013bc804935a3b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54e262baac4e92cf83cb11b2fa9ae73c7e42d6f9ee95968e0013bc804935a3b6
Size

359KB
MD5

6907a612c2cf97619405ca44860f609f
SHA1

1cb824d631a87542fac0c5ad08d3af2683085011
SHA256

54e262baac4e92cf83cb11b2fa9ae73c7e42d6f9ee95968e0013bc804935a3b6
SHA512

ee7bc714ed370bc88a2c6c259500e985c23491e71c5c1d628cff305b6667d9bb3fc42c8d4e98d2661cc10b1e398234102c058ccb7d842855d0d1b3ce9dd19cb4
SSDEEP

6144:31JflRDvOYAT+UBiPVCi55bdbP9GwCUKMCuxUQCInwF1/f6so:HbDvKTs9C+hGaCkU8y1K3

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e262baac4e92cf83cb11b2fa9ae73c7e42d6f9ee95968e0013bc804935a3b6

Files

54e262baac4e92cf83cb11b2fa9ae73c7e42d6f9ee95968e0013bc804935a3b6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE