990f28ef606febe72908f9e65adf22fcde5a380c80e0cfae29c2f4e0e29c2d91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

990f28ef606febe72908f9e65adf22fcde5a380c80e0cfae29c2f4e0e29c2d91
Size

504KB
MD5

6b8799fd967c5bf886f8e733843e88a0
SHA1

0f263542ae8093bd5c072d6c64b761a786ce7485
SHA256

990f28ef606febe72908f9e65adf22fcde5a380c80e0cfae29c2f4e0e29c2d91
SHA512

81448586b105bf5d80e1139803fecdb660a091367be3fabc7134dc5a81fa2f00c07292a4e430bd3c1341f7940150f3dc57c4df141e9ceb8721099edc3c55f819
SSDEEP

12288:ChRwctdaumW9fkQngna8YMmlUbzDCFC2PQKoS:Ch6cX/ZWa+nD0PQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

990f28ef606febe72908f9e65adf22fcde5a380c80e0cfae29c2f4e0e29c2d91
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�H�}�u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE