43e12d5306cda6a49ff6b057d570ff4e355862410e110dc0539b6cf1a8d58e22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43e12d5306cda6a49ff6b057d570ff4e355862410e110dc0539b6cf1a8d58e22
Size

21KB
MD5

05f4f7ba470ae44255a5ba9cab78a9a0
SHA1

6091699b75288365792b40c38a037aa4230ad896
SHA256

43e12d5306cda6a49ff6b057d570ff4e355862410e110dc0539b6cf1a8d58e22
SHA512

0af5b102a4aa7766d97aecaa0227cf5d3b29d90cd3d6c6769f0072c913d5d1b1c0cd37fd6a27bee11619d6be02daadd5624df39322fe954255f4a8d28caf7118
SSDEEP

384:RKUcZmymmmrz9SeRuYTqjGSpV0q0Xfg/XMr2QP3eb2uFFyaDVXpG:zymmCzBQktS8bg/8NZuFFy+VX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

43e12d5306cda6a49ff6b057d570ff4e355862410e110dc0539b6cf1a8d58e22
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RwDat
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE