5d95597d2cb4a3f3271721044c8bb080N | Triage

Sharing

General

Target

5d95597d2cb4a3f3271721044c8bb080N
Size

724KB
MD5

5d95597d2cb4a3f3271721044c8bb080
SHA1

6bb6dabce6e47a48e54c994f1b2d247a2aa3c0df
SHA256

6231a5792dc00dd1397dec008f5f7b304b9bd663ff8870d4b3baebe41e98e5ae
SHA512

773716e40657a84e66eb46467e1ad0aef38cecda76840067eaa62630c5b25f91feb4baf02c57c579c7b13db980862fbabb015fc83c6d21763df8cff600686a27
SSDEEP

12288:VQtw6lXtrIqP0wvhyIqg8Il8t2HBd2WQ/Tz1mfgoRb3br7Lup2:VIw6/vP02tnse2WUJmTRb3br7LuE

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d95597d2cb4a3f3271721044c8bb080N

Files

5d95597d2cb4a3f3271721044c8bb080N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE