5164a0423bc010f07a9f2c446e4be6fa39e5a8d09cc390a8d0f4951a8e0a3cc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5164a0423bc010f07a9f2c446e4be6fa39e5a8d09cc390a8d0f4951a8e0a3cc3
Size

15.8MB
MD5

2a43d44be4c3ceee46a6707fc4f4921c
SHA1

0263ef63bbed671452b5f3b8179f630b5ce01459
SHA256

5164a0423bc010f07a9f2c446e4be6fa39e5a8d09cc390a8d0f4951a8e0a3cc3
SHA512

8320b56b62173ef0f4889a7886fcc3bc8372e94818ecff1f8d9e4b3158582e8cd00e453eb46c42d4671a6d7fb2cb306727d0e07a4728ff3574fdf3f15fd9afe4
SSDEEP

196608:RaszbYLlZO6Eyif0o7bpzZNxF1MJsw9rw4Bfgmyl1BLelbSO4Dq9nnvwctdJ:+lZO6Xu0o/ploxBfgRPZvOJ9nvDT

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5164a0423bc010f07a9f2c446e4be6fa39e5a8d09cc390a8d0f4951a8e0a3cc3

Files

5164a0423bc010f07a9f2c446e4be6fa39e5a8d09cc390a8d0f4951a8e0a3cc3
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE