9d708f2f51474b55d29da6feffe852d0f2f82c67d49f439325105e5a0b5aa95e | Triage

Sharing

General

Target

9d708f2f51474b55d29da6feffe852d0f2f82c67d49f439325105e5a0b5aa95e
Size

737KB
MD5

0eaef6e456413e09b1fac01b892e56bd
SHA1

52e66be6cae951d4ad991f4330afde260517c93a
SHA256

9d708f2f51474b55d29da6feffe852d0f2f82c67d49f439325105e5a0b5aa95e
SHA512

7b78ca5a17eab403b311e9750db4632c3fce453058c0a5bfb1e630c9d3b86b0aac005358659473e9d72004c04b816f1b82925493709ec9a66128c8c6992ece80
SSDEEP

12288:CAsQRau1hGihV5mF248xY2Ve9ADTkxW50UJq98pQhEb23NsM2eWHoIka6w+GwTq:PsQcOxV55tDTkxg0UJUi3sT29HoQ6w+u

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9d708f2f51474b55d29da6feffe852d0f2f82c67d49f439325105e5a0b5aa95e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 652KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 220KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 596KB - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ