7dd16349323dad2c5dada76ad9db0d2eb24cb4a961e83cd044028f164a70e6c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7dd16349323dad2c5dada76ad9db0d2eb24cb4a961e83cd044028f164a70e6c5
Size

10KB
MD5

8adc2c3a063d978ab4bca6eb2c0c0270
SHA1

7b1f1be3fd92c469bb99703c904d9910c5173f3d
SHA256

7dd16349323dad2c5dada76ad9db0d2eb24cb4a961e83cd044028f164a70e6c5
SHA512

5a9c2477fca2fa3554ad2bf43d5585446df6a6ce7e5a5c1d553c407ae80c1b90dbeccc5d8320b908ef5e13335029f9180521b221d9014c0e7616ece519c4a12d
SSDEEP

192:Alw542tZ5do24PiWLJK+5sVsg2YlFkrCVB7d+m/+msB:+2tKvPiM95s5FkWp+Qb

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7dd16349323dad2c5dada76ad9db0d2eb24cb4a961e83cd044028f164a70e6c5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE