9886a1ccfc978265ea0c9ddb0623ec99edf6fc90368ff17c87ba748052079a2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9886a1ccfc978265ea0c9ddb0623ec99edf6fc90368ff17c87ba748052079a2e
Size

15KB
MD5

703b2a27e688d965f2b999c6e724d030
SHA1

7a67562a5016d728212016bb4cf3c6ef1242c537
SHA256

9886a1ccfc978265ea0c9ddb0623ec99edf6fc90368ff17c87ba748052079a2e
SHA512

01b57328e5ac84a3a5b3b47120980af63ea032399a8a9290d062fde50ef1b9c0560be7b62904cae2b30f93bf25ca3e20a6e01d50a005c15e4b2b98a0594f514f
SSDEEP

192:OWffekNOHSVzbqog9mvAvwDg/ZcRFKXZWFkm0wHdBxw0hztAKlh1IZ8In7z8DUBq:Trfq59m+w1KJWHNzxNpA4zIHyM+d

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9886a1ccfc978265ea0c9ddb0623ec99edf6fc90368ff17c87ba748052079a2e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ