tmp | Triage

Sharing

General

Target

tmp
Size

62KB
MD5

18d1d8ea71ffa9812280bde44e907367
SHA1

ec7457a555dad1b30b52780f9636295401ab19d3
SHA256

ed356329cdd2f65234708204420e0962cfeee31f5eaae4ab7d05142ff199b1bc
SHA512

ea043e917a3dab33a8d4e3f82fa5c49dcd1fc817af686d6e65be245374ca8d06d34f1530cf59f5913ad8154bcce0932444662380fd99b3c45ca0eaebb774d7f1
SSDEEP

1536:ehRsiY7HoXNVIQWRXr8N1o9r6dSubDR/moElTef9H:eiKeRbo1oJSHH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

tmp
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE