4366d8f07ea3c75b5393911c56f9000d78ce6b35418e751d834f4c2f1625edb2 | Triage

Sharing

General

Target

4366d8f07ea3c75b5393911c56f9000d78ce6b35418e751d834f4c2f1625edb2
Size

265KB
MD5

45d8eacc9a50294e94bec818d180e5c0
SHA1

94f824af15b641f43a6296ad242874ba2bf917c0
SHA256

4366d8f07ea3c75b5393911c56f9000d78ce6b35418e751d834f4c2f1625edb2
SHA512

6ea83de07a19a20673ab63a7b08f2cfde047ec699ac2f646cfc67d1233a6c3676f5bf9d0689aaf52320192f19237773e4ff6e9d539063dcf931e1e41e521270d
SSDEEP

6144:zYlK7BXzHgjDRT4wVuK11sFEwBpkLSm+luSk6XqLb+KV/YF+Mx:zYUSjD/uK11g9kF/6XqLb+KdYVx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4366d8f07ea3c75b5393911c56f9000d78ce6b35418e751d834f4c2f1625edb2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ