dfa8ec8427a55880f9725b1a68ffcc6cd01420c682383c80728470bf4dcf69b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfa8ec8427a55880f9725b1a68ffcc6cd01420c682383c80728470bf4dcf69b0
Size

348KB
MD5

39bfd1bc3c5e4fa6e8eae50ea0ce99c0
SHA1

25291059115c595129e7b626cad7f3a5d0c1cec2
SHA256

dfa8ec8427a55880f9725b1a68ffcc6cd01420c682383c80728470bf4dcf69b0
SHA512

2ffc3bb2e0dda10dbecbdbc500659b9670f02a01991e95f356b1d289ef8da5b4e0fbd5e4b703fc5d27268dc14a2bb2d2427c27ada768167f62b4ab967e303abd
SSDEEP

6144:3lZ/zUMu4pDSxsCMRzf7x3SfS1JAzXBtL76lioAiXNzNV+CPl+kX8vu5Y8/uO:3HLUMuiv9RgfSjAzRtyPrXNhvPlJ8vqv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dfa8ec8427a55880f9725b1a68ffcc6cd01420c682383c80728470bf4dcf69b0
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TUPX1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE