802674478091c8a60d864f2764b1120083954a2f3d89c0973217ab75c5387888 | Triage

Sharing

General

Target

802674478091c8a60d864f2764b1120083954a2f3d89c0973217ab75c5387888
Size

11KB
MD5

5a77d3ca7d0da0233d9793726973b176
SHA1

e39a363368e17d5fc4b5fb11c4fb6e5827d38a12
SHA256

802674478091c8a60d864f2764b1120083954a2f3d89c0973217ab75c5387888
SHA512

92eded682622660b7da3187309c8b6729bd87ecd782f0ea0086f28d6ca62b208666fb6d785d521acd59b2418ec5c8e23802c805b00d4d885e75dc5a8197a1b98
SSDEEP

192:9MAQZQ5NyJKGn/bA44fkqvt4xd+kh6n8tyuAhO9Bmr0tWp5+WrE:9XQZQ5dWxd+38tyZOSr0Wp5+WI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

802674478091c8a60d864f2764b1120083954a2f3d89c0973217ab75c5387888
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ