9f8d2df5752332a18ee33dba940c912d2890786ab774393ba1be7f7b205f1e00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f8d2df5752332a18ee33dba940c912d2890786ab774393ba1be7f7b205f1e00
Size

43KB
MD5

b3c41c3b61b82bae4be53cedfb80dcda
SHA1

b241055c68a461d482cb13073c1e40166c9ba25c
SHA256

9f8d2df5752332a18ee33dba940c912d2890786ab774393ba1be7f7b205f1e00
SHA512

6131fe0d3b3ddff2298aeb6fc5f6c95c426756cc105da97c8b1b4b23a7f41e73442e7bc03350ea746ce368f0d538aaee1465573c7690b52ced1732a64ed104f1
SSDEEP

768:8oRHXp9/pWk77YD8Ses42knUVQhdqVHR84NynuBhNMJ/60mjSKDel+:jRHjMk4ZIn/hkR86l70mjSKDel+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f8d2df5752332a18ee33dba940c912d2890786ab774393ba1be7f7b205f1e00
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ