2a7c69bb4b6071583580be5fd0f3657fa62be1e2e9d7f1a66c7b3b36387f3091 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a7c69bb4b6071583580be5fd0f3657fa62be1e2e9d7f1a66c7b3b36387f3091
Size

4KB
MD5

073c9e11d176bb2ed1245dbac189fb83
SHA1

844d20e396036e05b9a163bad6c2b250e3a84a37
SHA256

2a7c69bb4b6071583580be5fd0f3657fa62be1e2e9d7f1a66c7b3b36387f3091
SHA512

381fcce25ae4429c894b5b48351a38315ab028fa48fa3bd1c795f3776db28833862f1fe8dcac97b13f18c9cb53961199a7542ae56476385e91488eb7dd87e4f7
SSDEEP

48:qryp+jZA8mren96lh0o8tbGwPjPUozpX4yggasuM3i7R/rkb3hYMWOoo2AgHW4qL:MZmr2qSo8tbbjPUaxg4DSKBWmVgSh+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2a7c69bb4b6071583580be5fd0f3657fa62be1e2e9d7f1a66c7b3b36387f3091
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE