0f870d97f2a6f5a74a6f3533376c104decc4e7ed37b3ddd16924dc974d31bb07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f870d97f2a6f5a74a6f3533376c104decc4e7ed37b3ddd16924dc974d31bb07
Size

5KB
MD5

4a3df038833b95a39a156597b02593e0
SHA1

709f7ab1ad55debc325df0612725b5765d5c2941
SHA256

0f870d97f2a6f5a74a6f3533376c104decc4e7ed37b3ddd16924dc974d31bb07
SHA512

224e7f4b3952b0ef9541c9fb84b3c81cc305934617736f1393fbd69e1e48fb15244e1322c9a130c86bd9f9cd74cf7bdf2b9d4ac46bb872a5778131e75ad42460
SSDEEP

96:ovl10GxW2FjJYPmVI+tTpMbCJBnXgFq3cx1U0zqukU:ovl10GPdYPmVI+tTpXXXcEukU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0f870d97f2a6f5a74a6f3533376c104decc4e7ed37b3ddd16924dc974d31bb07
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE