817238861c2fdc8325277cd7a3f88bfafc829b5f919716447e0d5dd0c8b81e99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

817238861c2fdc8325277cd7a3f88bfafc829b5f919716447e0d5dd0c8b81e99
Size

16KB
MD5

cc0bc6582b5aa2afb96a866783f7bdde
SHA1

2d198e06d5eaa921986f439fe4799a514be92bc7
SHA256

817238861c2fdc8325277cd7a3f88bfafc829b5f919716447e0d5dd0c8b81e99
SHA512

20dc10bb6f507bcd3d4a4b41e4b99fd01caffc2ab08a98e9a5a3b733333b8ec5efd424f9db6d4f24ebfd586fb9732b99454f106fe8651b1bbe02f479600fd7e2
SSDEEP

384:SLASa1Ezd6UfFk2S8aUIKkC1vKcIkeASv1:gJQY5JaUICNXIkjI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

817238861c2fdc8325277cd7a3f88bfafc829b5f919716447e0d5dd0c8b81e99
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ