1928a8ff7fb35da0edcf64116b16518401ec64283f77cc1617e154b7979e60da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1928a8ff7fb35da0edcf64116b16518401ec64283f77cc1617e154b7979e60da
Size

50KB
MD5

69492267b43492af57473558fc331680
SHA1

fac3a82d36fd1041d0123aa6d43b7af0532f8fa1
SHA256

1928a8ff7fb35da0edcf64116b16518401ec64283f77cc1617e154b7979e60da
SHA512

2dd1c82aff14d952b3f5d55dff17cad9c04626cac2a4c92aab5a20018bdccf1894444ce64887a1a3003917a564ff76f133062477d2804803c27992c61fb4235f
SSDEEP

384:qhOcOIvuwTu8pAk7x9Y9TKrQzrY0kyVICjHDoFjYk8bUnR+lh3fhUGkXylCMOMmC:mOYhBph7x9Y9qF0ljDoeAQfWG8yUdxY

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1928a8ff7fb35da0edcf64116b16518401ec64283f77cc1617e154b7979e60da
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ