59998582cb16b77bfdbf41ab171610069cc59a426f1167814e7b9cfc569075cc | Triage

Sharing

General

Target

59998582cb16b77bfdbf41ab171610069cc59a426f1167814e7b9cfc569075cc
Size

131KB
MD5

109c260afa360406aa9da1621a2f4a05
SHA1

ea399949d770865cd40538c2f4b5b22a01023ec8
SHA256

59998582cb16b77bfdbf41ab171610069cc59a426f1167814e7b9cfc569075cc
SHA512

c64cf8ad9919e57a1986298a797fff328534d814f4387ef13a8fb3b1acb210b240a612b74a2e4c95382ae461c028cea132889525966f6c5adb17c7abe56ab2cf
SSDEEP

1536:V7Zf/FAxTWoJJ7TqQwAqQwAUEk8NhoYyRvaLNFqRprAqnMEosmE+w+dnw+dnEDhb:fny1OLAqLAUFXwk

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59998582cb16b77bfdbf41ab171610069cc59a426f1167814e7b9cfc569075cc

Files

59998582cb16b77bfdbf41ab171610069cc59a426f1167814e7b9cfc569075cc
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE