4a975fc5bee081e6d74a21b6e8bfb25c5c9b62c554a6762535454829630b33d1 | Triage

Sharing

General

Target

4a975fc5bee081e6d74a21b6e8bfb25c5c9b62c554a6762535454829630b33d1
Size

364KB
MD5

691619979c2bcaea3406976d0df9b71e
SHA1

5f2e47b754bd7f788ee57e0d81f8ce03a1c86e68
SHA256

4a975fc5bee081e6d74a21b6e8bfb25c5c9b62c554a6762535454829630b33d1
SHA512

730fb633dc8c02e0e7899e13c8a629ac5576b37571154a95d98374140b93e0cbeaf3d09c1e0a52408b5c10eaea56bfc005095c6004553837d7fc69546d558065
SSDEEP

6144:JqrO6tdT103xwm+dOyFon19KuN2BWT9yBr23vGx83YvBINHAwUMXCfBAQ:Jtwm+JS1wGelt2K7BBwUMXgGQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4a975fc5bee081e6d74a21b6e8bfb25c5c9b62c554a6762535454829630b33d1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ