a345d9dc7f02526910c960cb82dcbb418bbd0f6b4a28c0879e1c41eba6677163 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a345d9dc7f02526910c960cb82dcbb418bbd0f6b4a28c0879e1c41eba6677163
Size

33KB
MD5

215f05b8625c2634b37e2c5d1c35395b
SHA1

8c6ec4f909211c1c6562a96627874e944c41fd6e
SHA256

a345d9dc7f02526910c960cb82dcbb418bbd0f6b4a28c0879e1c41eba6677163
SHA512

b2e8ac39420761f1a6c4127a034aaac5d753fd80e8b51164d66bf3d65477d1aab6851fb4615f1210c62db36d72af4880f9746e0afc710038135c0d1781771ae2
SSDEEP

768:s4BSIxDt5SWlojxhLJdNOXUfJVhlYlroQtSEfM:s4IwDO26dJdNeGV0l0wHf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a345d9dc7f02526910c960cb82dcbb418bbd0f6b4a28c0879e1c41eba6677163
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ