57c7cb4ae0e01922abf12a2a7360b080N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57c7cb4ae0e01922abf12a2a7360b080N
Size

283KB
MD5

57c7cb4ae0e01922abf12a2a7360b080
SHA1

b19bef3638618f7c8d327f852d33ea57338ae1f6
SHA256

937a5fc9038cc302155fd332bb85480b14ad5015833441e9ba34def42bdfa182
SHA512

abe64fce7e3412e44e43e42bdf96e394fe1161ce784bbbd6e7903694d3223b8af352bcd2fadf80477f9ae6d498bbd1d812cb1fff973c08f2193df5132714c32e
SSDEEP

6144:NgHX5BGeyzxxWf26TUQ9NwWlIaLhjgWzDT2+Sb:NgHX58NxWPX9NwWqaVj6N

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57c7cb4ae0e01922abf12a2a7360b080N

Files

57c7cb4ae0e01922abf12a2a7360b080N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE