94018159ee6c6dacf8126c1ab717d8f91efb636bf99a199da0f39091f2a88890 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94018159ee6c6dacf8126c1ab717d8f91efb636bf99a199da0f39091f2a88890
Size

24KB
MD5

ef55f6cb935fc812ec546b69b0f11c66
SHA1

9c0f8472d65d08242f538b0aceeda0c5fd15b401
SHA256

94018159ee6c6dacf8126c1ab717d8f91efb636bf99a199da0f39091f2a88890
SHA512

f6eab6847011365494bab3512b3883cdb4427793cb5a9fc206c1b771519717489aa10b94756020b2f325d3e8ca1d56f0def7feb7f009aaa6b1264a96f206e500
SSDEEP

384:puEJ94lu3OTfRbfB6ZhwiqbxQiHrGL5mH1Yt6QSsnsN:giuu3qRLoKbx9rU5mH1Yt6QJs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

94018159ee6c6dacf8126c1ab717d8f91efb636bf99a199da0f39091f2a88890
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ