5941afec19bdaeadb8e50a32075407cf64e3460f218047e941b77ba5216169f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5941afec19bdaeadb8e50a32075407cf64e3460f218047e941b77ba5216169f8
Size

36KB
MD5

6c252041cf807d66041c13c90812f800
SHA1

ce44e7d8fa7af9a82c59e9fa5c9867a1f9b692d0
SHA256

5941afec19bdaeadb8e50a32075407cf64e3460f218047e941b77ba5216169f8
SHA512

c8826f0ce5074502c227ca70b2bb75488bd67efd8c0b3c953365fb017a5a7d3330ad19df73abedbf83e85a798f114742def7af916545d1c1b3e8e9c658b3590a
SSDEEP

768:SCIqdH/k1ZVcT194jp4E5wRJ5BwdpibKltDSLEu:SNqaLV8a6EOTjQSgKEu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5941afec19bdaeadb8e50a32075407cf64e3460f218047e941b77ba5216169f8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ