8fef9c7553c3e9016e990d99490f5a538129de1ca70c6263926dff7cd6652888 | Triage

Sharing

General

Target

8fef9c7553c3e9016e990d99490f5a538129de1ca70c6263926dff7cd6652888
Size

38KB
MD5

13e531fe28ccd304bf2f384a81f46827
SHA1

59f9bfe22545ddd81e5de2c5e4f21f97b406d6bd
SHA256

8fef9c7553c3e9016e990d99490f5a538129de1ca70c6263926dff7cd6652888
SHA512

ea4bb5bd132a8c2cc20fa4ae1e9a9752c3cd8c00d42f29d36af65a96597f8d5be9be516580f0383fc0a93f2f7c439bb3856f3ce00855ad4fcb3b0eed639c0503
SSDEEP

768:EmlFqOWGxBQYgis+pdECTcp8m/uevxLdE6twIFvk:EmaOjgis+puXpzuevxXt19k

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8fef9c7553c3e9016e990d99490f5a538129de1ca70c6263926dff7cd6652888
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ