92aa654a47a18d16a08a354eb0c31e32a8105298a2da432c9cef52d8c0b042bc | Triage

Sharing

General

Target

92aa654a47a18d16a08a354eb0c31e32a8105298a2da432c9cef52d8c0b042bc
Size

145KB
MD5

692574be2200a312112b950c65e4f261
SHA1

dc19eb92fe43f49a84502cfe8f4c55c1be9a6f6f
SHA256

92aa654a47a18d16a08a354eb0c31e32a8105298a2da432c9cef52d8c0b042bc
SHA512

c542d763123faefdbf8fcc91805639686180810eeef7621838f5599562c0a1f0b0bd2ff29685ec6b7ba6d5189233f19f3ed647d98929a6e06d76eb5dcf6158fb
SSDEEP

1536:7HPxECkY0WNrVsUw91lQIUWsGc5WR76VuDJDDVR93awnk00NvLwYSlHZSRpL+IN9:zw+KUAQbVMwuDJDhRlaGCvtSlHZOD0o

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

92aa654a47a18d16a08a354eb0c31e32a8105298a2da432c9cef52d8c0b042bc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ