5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN

General

Target
5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN
Size 83KB
Sample241109-1v9trawlen
SHA256 5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aee
MD5 aa116f00277ce36c09473d83bbf61660
SHA1 eaa7802565d03d64b34cc2130ac5c4ab1a8a4d02
SHA512 d3d13c3fabfd452c22f392342230778604a022dd56d8d167ca25cd7d6bf48c56ee8af11bb1d67eec16f3ef96081b69fdf9977956bc77ee2b311f32c37d6e3737
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+hK:LJ0TAz6Mte4A+aaZx8EnCGVuh
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN
unpack001/out.upx

File Explorer

5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN

.exe 83KB
out.upx

.exe 135KB

5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN

SHA256 5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aee
MD5 aa116f00277ce36c09473d83bbf61660
SHA1 eaa7802565d03d64b34cc2130ac5c4ab1a8a4d02
SHA512 d3d13c3fabfd452c22f392342230778604a022dd56d8d167ca25cd7d6bf48c56ee8af11bb1d67eec16f3ef96081b69fdf9977956bc77ee2b311f32c37d6e3737
SSDEEP 1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+hK:LJ0TAz6Mte4A+aaZx8EnCGVuh
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

165392

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

out.upx

SHA256 b40e3462685926844e6c34513d496417989b658f910045b0604b1c25f0e67df4
MD5 127097bcc2225331910ab58583a913c0
SHA1 cb58ffa60cad07a4650a9276ba19ca08522c76a6
SHA512 659c0701c6825ce6d2f35dc7d42d7dbb10ba09c3d891dcaa67a594286211baa0c7a20b8f5c65e594ead6a7b75660a2114cd4c9941d687b715036b7e4fdb43ab9
SSDEEP 3072:Xs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/E/Fnncr:XDeM7iNEkgiOb31k1ECiJ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN

generic

out.upx

generic

Sharing

General

Malware Config

Signatures

File Explorer

5c50706e35386be4ad634afa4423356f4ce1cbe7e14a41253d4a0f3e72861aeeN

generic

out.upx

generic