56185c11fb6f6b491eb73b0321032ce0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56185c11fb6f6b491eb73b0321032ce0N
Size

4KB
MD5

56185c11fb6f6b491eb73b0321032ce0
SHA1

f017b1f9d6beffe7be33b390fba7101fa9569615
SHA256

2c1440c76eae5bbe683f87e5e288bdac9e7bf9e3c84214240921879e1e195954
SHA512

fddac6a247b390c81ae62efb83e3b2ed78a9f27fcf4757f5f2ba3f0fa5b74456eaa107a950fed36675d36888827b4e267400635cb5a60d216c6d499767b7eb4e

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56185c11fb6f6b491eb73b0321032ce0N

Files

56185c11fb6f6b491eb73b0321032ce0N
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE