6a24d81f6a5437b4f3f893fa28342ccc4aa94b4682b69b90cfb5cfdd85940ea1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a24d81f6a5437b4f3f893fa28342ccc4aa94b4682b69b90cfb5cfdd85940ea1
Size

80KB
MD5

5539b257c28da4ee0c0b6d72e4e494c0
SHA1

5d3b3aa13be1ff90392904ff755e92cb9a0d6f5e
SHA256

6a24d81f6a5437b4f3f893fa28342ccc4aa94b4682b69b90cfb5cfdd85940ea1
SHA512

67b5098cbe971da78abe1f5a724b16f02606b620b7c10941f87636c7d78c9cbcf021505ea1f8e4f8c8b69789fadccf9cba1176b2cbadce8aae9a6b7ebde53889
SSDEEP

1536:IJYrO69I1jLjf+AQ2qfNWYwbidNpdcuGNiDghzkirqLlD5+HJZ4qRm:IJz72xw+dNrcymlrqLlD5+pZH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6a24d81f6a5437b4f3f893fa28342ccc4aa94b4682b69b90cfb5cfdd85940ea1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ