f31f0f275def11d82b2b02aa8bbc1a145c981de4b9c7d89034298fe2f07edf2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f31f0f275def11d82b2b02aa8bbc1a145c981de4b9c7d89034298fe2f07edf2c
Size

778KB
MD5

4d168356126c5362075e7a024b823a60
SHA1

a405d6c4bdecdf40d09c2c337dfbe57bf4b936f5
SHA256

f31f0f275def11d82b2b02aa8bbc1a145c981de4b9c7d89034298fe2f07edf2c
SHA512

899f112fdffb29e9b8cbdeb21a372fa4a236d8ab193def925ed1891dcb36a307a3c6e070ff55d1f312d86538c6e41fed7ee76f26765a043c7f84d21bdfa8f339
SSDEEP

768:dnV0S46PQuYB2OhhHt0nzUGBCPw8XQoyX767Np71et+vKLcsVT:dA6o55nHtO4Wb8gd67VvEcs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f31f0f275def11d82b2b02aa8bbc1a145c981de4b9c7d89034298fe2f07edf2c
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 392KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SUPX1
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE