d7e9fa3455f11c13fa89f9cca7d51953578e1c673fedae619e1849a7456e8d49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7e9fa3455f11c13fa89f9cca7d51953578e1c673fedae619e1849a7456e8d49
Size

18KB
MD5

64a5e3c8d7a8499f26be8e792578b77c
SHA1

6593c7a646b1ea421ae5b8f53789347c6a09839c
SHA256

d7e9fa3455f11c13fa89f9cca7d51953578e1c673fedae619e1849a7456e8d49
SHA512

6c36b4187ea172ff119005fa0fee68eb4fd69ff554bbf17ef457fd04c738b0eeb9f70a9b9022d1f2c210499929af0d3e074204c5703b038353529728adc8edc0
SSDEEP

384:TaoFG7KU8HCbI3uHlx88X1Fp165wh0FM:bFuKBHCbI+Hlx5FyCh0F

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d7e9fa3455f11c13fa89f9cca7d51953578e1c673fedae619e1849a7456e8d49
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ