45ab109b7cd8048a23c0afc5c4ad94389efd8881c89089ca1ee9d53e32b787ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45ab109b7cd8048a23c0afc5c4ad94389efd8881c89089ca1ee9d53e32b787ef
Size

74KB
MD5

213ce2aa377fbda52393ddf4c47cfb90
SHA1

904cf9196653541d1872d4a3dab3eabc07dd9f2c
SHA256

45ab109b7cd8048a23c0afc5c4ad94389efd8881c89089ca1ee9d53e32b787ef
SHA512

047ad7079bb72af9137bd95fa71a7ae5b270c1b70088ca108d5a1b9f7f4533f7fb656df80b1a7dc02b462ab48665ef1019a587c0efc22e4cec09b5e7cd4a3cd3
SSDEEP

1536:lfTh6vB5Wxi9+P03uZ/qxnDfvySqFezvgxR1YOLN6I4RuzDmbrN/LaG65pVVw:+Bf91eZCxnbvTqFezgf6OII4RLYGZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

45ab109b7cd8048a23c0afc5c4ad94389efd8881c89089ca1ee9d53e32b787ef
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ