87477ff007c46fc9ed015e7a8021882df78ea558595137daf9e2f2445dd8d7b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87477ff007c46fc9ed015e7a8021882df78ea558595137daf9e2f2445dd8d7b3
Size

459KB
MD5

684fd00a4595098cc64dcfcfd6ee0c50
SHA1

a3b5d8a570ae837ff1fc967ac48f22761229d980
SHA256

87477ff007c46fc9ed015e7a8021882df78ea558595137daf9e2f2445dd8d7b3
SHA512

20001bd62c648cbd5523dbc3955aa4040f3879b30b7b4f41b2b0c7cb95680b81af11dce388d8996537ba95e86a9220c4c18b87acdc92d0fccf87037d6f1e22e1
SSDEEP

6144:2knN4CVUIm6uk06ZLYgvBA+8xmrxgmA+3cclptVopAf:bnNhuBoY8SorxgmA+nlvVlf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

87477ff007c46fc9ed015e7a8021882df78ea558595137daf9e2f2445dd8d7b3
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RUPX1
Size: 76KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE