06a42467c2ed16d6c5a6bc0f7dd554afa4551e9edb5d7599de32f4fc887e28ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06a42467c2ed16d6c5a6bc0f7dd554afa4551e9edb5d7599de32f4fc887e28ac
Size

355KB
MD5

709ffe9c20a02f1f3946e90e9788113e
SHA1

6d4a6f8b355b6a75b6a27629f0ec90ccbbf9307a
SHA256

06a42467c2ed16d6c5a6bc0f7dd554afa4551e9edb5d7599de32f4fc887e28ac
SHA512

d72c954bb29999c74d2da7551860a78438ab416981404bd5cbca6579636d46d20df8299230bc8f1a0d024a527df0a1f8d31bde8e077f5f58bfa959518ab6a153
SSDEEP

6144:70yCDKUMYvoTpmC705/Tn6c78P7i+6Q7uOf3n2SbvPmPHa1rfRxLLD0o9J+qvwuy:7012OvoTMC7u7ncPf6kusX1uaxfrWqo5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

06a42467c2ed16d6c5a6bc0f7dd554afa4551e9edb5d7599de32f4fc887e28ac
.exe windows x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

UPX0
Size: - Virtual size: 952KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE