ff9f5541a5932ee82a8928a0d781ebeb9b72945208f7d9768dc35cdaea4cfb2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff9f5541a5932ee82a8928a0d781ebeb9b72945208f7d9768dc35cdaea4cfb2e
Size

55KB
MD5

61de3e86b6d1fab444f197dd53606ee0
SHA1

4b0dfb21832ad2c03c0c7c6e5828278b5f62df63
SHA256

ff9f5541a5932ee82a8928a0d781ebeb9b72945208f7d9768dc35cdaea4cfb2e
SHA512

818b72527523f80f482ecc126a73734329748605d92c317192a5c5c166d2340e37bab57c6042fb3378d613bcc43ca0c9e25f9cdedddb92dd034a0ec26dbb2c65
SSDEEP

768:2aOafHxXHmcLyAxfj00Q7Ee17X3QTzERO/dESOlleIsCa8Jiq9hR9OBT8I:2wVLBVX+LGfWSczsCa8Jiq9hSv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ff9f5541a5932ee82a8928a0d781ebeb9b72945208f7d9768dc35cdaea4cfb2e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE