d7c9364bdd8baa30807b4e8bcc7470daeb311a628a2e3455712ef7b54b6a64bd | Triage

Sharing

General

Target

d7c9364bdd8baa30807b4e8bcc7470daeb311a628a2e3455712ef7b54b6a64bd
Size

22KB
MD5

6020c8cc875f5c834ad17378986eaf71
SHA1

c123bb0373f27af46ea21f8c3247dab06dd193b5
SHA256

d7c9364bdd8baa30807b4e8bcc7470daeb311a628a2e3455712ef7b54b6a64bd
SHA512

68fd64c1700bf05de8117bd1b866a0d5bb388e660d0f0cf66a06144221776c887f2d2c6fd5c51af9c8875973b709d972b8a92a8537fddfa84d24d23d95cbd634
SSDEEP

384:gAGRXZQjTPkfmHORjFO1ILwNOh84gWeEbOJJs5vNY43GLbzXZpiBeVlcGPdX2:YtyTP7HOirQMWenJJZ4Y/ZVlcgdG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d7c9364bdd8baa30807b4e8bcc7470daeb311a628a2e3455712ef7b54b6a64bd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ