af059b232cba4ee9e7586971bec430191cb20e479a72c8101d9f7c0f3703caac | Triage

Sharing

General

Target

af059b232cba4ee9e7586971bec430191cb20e479a72c8101d9f7c0f3703caac
Size

52KB
MD5

654202c50c81d2b1f37a48df07817e5f
SHA1

81b135d6cb096415de8bb47fd0e9418d74123a0a
SHA256

af059b232cba4ee9e7586971bec430191cb20e479a72c8101d9f7c0f3703caac
SHA512

1f3c340543d22959d1e69339a719ffc4b315ceea861516ace9bcaa11a78f41c01f1483224a19bc8f327471d9ab9f5323c6f514a3f5cb7b253c55419ae7c2cf42
SSDEEP

768:IgimnSVvb1lKhn4wWtZxO5IcblsLObw6vTlpeY/Y0UCYinSY0xUf2vVaMb:Ii2vb1lK3WtnOq4isoaYr5QSd0Mb

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

af059b232cba4ee9e7586971bec430191cb20e479a72c8101d9f7c0f3703caac
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ