23055f76fa1d51d00a8d1d16cf34cdbecaa4a2ff1db28020a044c969011bae44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23055f76fa1d51d00a8d1d16cf34cdbecaa4a2ff1db28020a044c969011bae44
Size

416KB
MD5

0d3f5af231edeadc367ad0badd35cca2
SHA1

76e5d47db9c44abd32d9833cbc43159e9411d785
SHA256

23055f76fa1d51d00a8d1d16cf34cdbecaa4a2ff1db28020a044c969011bae44
SHA512

a6724c5972516ec449b79c0aada03948b90169ec82f0a0057ae1d9d5b176b7f5776ec60587aa50a0030e7c40d2fe0f0f93cb3fd5f922e6271a73859d53910aed
SSDEEP

12288:tEQoS9qh2q9trlpit9rmn1LMUOjRqu2PktMv:t2F/lpit61LiRqu28tMv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

23055f76fa1d51d00a8d1d16cf34cdbecaa4a2ff1db28020a044c969011bae44
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.btnj
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE