bd5faeee82bf133f62917f3572ac9520N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd5faeee82bf133f62917f3572ac9520N
Size

81KB
MD5

bd5faeee82bf133f62917f3572ac9520
SHA1

f86f018ed5e9d6d40363d754869afb536c0d168c
SHA256

33a5a91d870f67d644bbe9137c5621717d52da3abdb86e80c990a226b9d149a0
SHA512

bc3728f77b42e9ef7f1c07668a604da14d92735e83e59a6a5ee7c71a7d99da7e95be8d3451be4e44372b6c808a30d9721bb145e1b02b364e0383e448cda4f9c6
SSDEEP

1536:V7Zf/FAxTWoJJ7TqTW7JJ7TiElXX22woD:fny1t22L

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd5faeee82bf133f62917f3572ac9520N

Files

bd5faeee82bf133f62917f3572ac9520N
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE