0aa1f54dc90b2934802e311d891e7e3f639a9dcfc6979e3e53ce6d5953059097 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aa1f54dc90b2934802e311d891e7e3f639a9dcfc6979e3e53ce6d5953059097
Size

85KB
MD5

6b6b1d81e9169f0c796131dd0af05970
SHA1

f215f0d8647b098a7aadd311603b3b6f45bc8620
SHA256

0aa1f54dc90b2934802e311d891e7e3f639a9dcfc6979e3e53ce6d5953059097
SHA512

7ab2fad02505ac14211859d7a6f1602b5268a6a81913c9c4465dacacc2c99c7d9ad60a7be4c583ad5e8a9fa38878157a68e5da918b1d6cb2262f82a5069b6554
SSDEEP

1536:p4vqOmQUQyOtTKsWT5ZzDBKMSe/tm1+1Of:+Dm9CcKze/g1+S

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0aa1f54dc90b2934802e311d891e7e3f639a9dcfc6979e3e53ce6d5953059097
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bsjlyys
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE