41d8c76941e8dbb664883361551799b4e20c7915b4f3c8e0af8c216801174b86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41d8c76941e8dbb664883361551799b4e20c7915b4f3c8e0af8c216801174b86
Size

22.2MB
MD5

c8935975bd4eecf8c5aa7f74745ab3a7
SHA1

af02f7558657e189e03b7c3b85ebda7c7da03b31
SHA256

41d8c76941e8dbb664883361551799b4e20c7915b4f3c8e0af8c216801174b86
SHA512

3aced0e89052c2ae1e9e6562a0b7ae598ff9f097672d815f2e2953e3efec76f6206062f10c52cd58f4ff8becbbeb42bc67114c91115960dba5bb34a435a4f1a2
SSDEEP

393216:+b+6b4ERAqPID+X6DwW4imFJFpjSA3nnMUfA/KAizTupX9n01XKpAnKKos:+a/ERfA6KMW2FF3nMUoSAiIX90Bms

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

41d8c76941e8dbb664883361551799b4e20c7915b4f3c8e0af8c216801174b86
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ