4dad15387734fc2d191e609e3ccaef9f06bc877f8c9aee452f4196593ebd99b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dad15387734fc2d191e609e3ccaef9f06bc877f8c9aee452f4196593ebd99b7
Size

22KB
MD5

6415ca4c9430ca3f672d0cf85529e732
SHA1

82efe132c42ce9041a70c866b997b99c8d3178a2
SHA256

4dad15387734fc2d191e609e3ccaef9f06bc877f8c9aee452f4196593ebd99b7
SHA512

62ff82a3822574e70c807e97625d9e000c442fac8f17fd03a03ac3f5e63085d2290d1bd7b519c1fce1b1fac2d1235db3cebe4728f7e5950030d06fbe45be172a
SSDEEP

384:vGEWMBiaYjwwrI7ofsrj4ikRa/NfGuJUQ6PeQ7IX4mZXa4HWE3pDuO:vTWwiaYjZE7ssrHcQAOn6WmIX4eXa42d

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4dad15387734fc2d191e609e3ccaef9f06bc877f8c9aee452f4196593ebd99b7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ