82fdb94d7d7883cb02779abf97fee1a3047de65350bb1e87370401785115ac53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82fdb94d7d7883cb02779abf97fee1a3047de65350bb1e87370401785115ac53
Size

59KB
MD5

a615ef095b17637aa5f28ff2bdc0a3b5
SHA1

fa78f36c6edd61979fba06f0bacdab65082146af
SHA256

82fdb94d7d7883cb02779abf97fee1a3047de65350bb1e87370401785115ac53
SHA512

1ef19d6295ff3d30ecbe117212726e2ff1a9b0ad4ea78d173c02c9df1fa7da51d8bf5b36b12a12e640f5337824eb3bc1181b990f9ced1edd6c0901cf419382e4
SSDEEP

768:QNYb6I01o+UqTpWGXCPbvPjWvtnqyFTQNnu+GAmLWNxqLqTzbZIy9F3Z7bB1jWhN:YY74ZIGX6bWh5QcqAW3iqzZI+7nBmO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

82fdb94d7d7883cb02779abf97fee1a3047de65350bb1e87370401785115ac53
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE