88f5ba95134891805d0024f8d063cde0410232754e0f19e011cc36d9e64493ca | Triage

Sharing

General

Target

88f5ba95134891805d0024f8d063cde0410232754e0f19e011cc36d9e64493ca
Size

139KB
MD5

bfc81d6dfd6c3b3d33fdad1cc6788d57
SHA1

acb8275d6666a6f5d75e4b0b3f72dff88e6a8028
SHA256

88f5ba95134891805d0024f8d063cde0410232754e0f19e011cc36d9e64493ca
SHA512

a1b3edd47b464b5ecc8b3771f0e875465f4839cb954a13a3c6a404189e3792d344df5bc6fb6919c7d15446b88745f37fdcf371df4a7861f60cbe67756b1451ec
SSDEEP

3072:bsOiBQiqnmk51+XFyJrPNOv0groKGPqsfYHzBL2TwaGEu:bs1Binmk58yJrPO0IswFLXE

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

88f5ba95134891805d0024f8d063cde0410232754e0f19e011cc36d9e64493ca
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ