28e4d8aa371bcbc108bc8abec4055488142673746b1a3419b1b79632661415d4 | Triage

Sharing

General

Target

28e4d8aa371bcbc108bc8abec4055488142673746b1a3419b1b79632661415d4
Size

84KB
MD5

516f8a7d525d895662582f22d98cc7e6
SHA1

4046b2f36127f6d6ab9135ecbd4e2f25666a649c
SHA256

28e4d8aa371bcbc108bc8abec4055488142673746b1a3419b1b79632661415d4
SHA512

6a2949c301612525f0767971164c129e30dd828d62aac21acdd67b54196e73dcae30c0be56820cc21a3175807524f45bb9842939da28f44dea5682ae98af44fd
SSDEEP

1536:uWQMTtHSH2e3Q/dGhDsuKutMZ1tTheL9sbcXDXubdNbCOc157cEh5TwlhW6kPRFT:fBtDdjzu2tq+EebdNeOcAUNwlKJxj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

28e4d8aa371bcbc108bc8abec4055488142673746b1a3419b1b79632661415d4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE