9b483f9bcfa38f213a819b0ce7ab59ab9e505dc3a10ea97857fd8b51dc79e4ac | Triage

Sharing

General

Target

9b483f9bcfa38f213a819b0ce7ab59ab9e505dc3a10ea97857fd8b51dc79e4ac
Size

297KB
MD5

e17d2e90dda07f6ab4161e02914cc4ad
SHA1

b281c612cea24b0669d86e00ae56d40fa9eece84
SHA256

9b483f9bcfa38f213a819b0ce7ab59ab9e505dc3a10ea97857fd8b51dc79e4ac
SHA512

e3a24c764aab648b302143d8f67c9753995a04628a51c74519d9353b4fcab264a96b69061996e4f623fa85591d581bae770126e93ef6805bc724d1798f1d7ab8
SSDEEP

6144:lIC7rGN3bkty0Mki8787O71rkhJSajmcXZ:R7rGNrkty0fkhAAmC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9b483f9bcfa38f213a819b0ce7ab59ab9e505dc3a10ea97857fd8b51dc79e4ac
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 312KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 290KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.TEXT
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ