9558b69e20b65adc3a8010b5a83f1730eb4119b8336e8a99b62b7888c9cdbc35 | Triage

Sharing

General

Target

9558b69e20b65adc3a8010b5a83f1730eb4119b8336e8a99b62b7888c9cdbc35
Size

629KB
MD5

53c9d9e6fe968c25235ebdfff0620af3
SHA1

e63d3e7ad5d68893aac23cc61329b4d16d9bf31f
SHA256

9558b69e20b65adc3a8010b5a83f1730eb4119b8336e8a99b62b7888c9cdbc35
SHA512

038864792d7e6d5ded8ba245972633a3a8363aaed94a9e2b28c57dd891d97c3b12504fb81464e0cb75ce81a31cc9092b1fc61fa8ee34987b06b4717a97bc460d
SSDEEP

12288:t2fGArcljQceSP5tCS1vNJ4h1vPBxSgft9IKar2drNgIQXP6jRr:teJBnSP5cS1vyPBxSmsT2dZgIQf6Rr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9558b69e20b65adc3a8010b5a83f1730eb4119b8336e8a99b62b7888c9cdbc35
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 456KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 436KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ