0a8e6960e119cb52305de5a0172146f5b6cccd5a1fcb5e337ea8ccce6e0afb3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a8e6960e119cb52305de5a0172146f5b6cccd5a1fcb5e337ea8ccce6e0afb3c
Size

284KB
MD5

7b21a0cedb0669589431d3cca7ddf8d0
SHA1

75da0081ba52106daae581b946930cfcc11ab42b
SHA256

0a8e6960e119cb52305de5a0172146f5b6cccd5a1fcb5e337ea8ccce6e0afb3c
SHA512

b87f4a929cef8054a7052f9afd8e929549727860785c2668d2bf0edce50652bcf39a7b007f4399c19ec560e85ab3db8f1361e90ad4112cfa8d02087342d147e9
SSDEEP

6144:QuMJWY+qaHEQCcYfSBYJbQCjRcqESEgm6Anhc1kG6Evy0zo0naGh:Q+YcUc6SBLLTSEgBAnhc1kGVPaGh

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0a8e6960e119cb52305de5a0172146f5b6cccd5a1fcb5e337ea8ccce6e0afb3c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 368KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 217KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tqn
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE