0985751de0ce7053e0e0d35ea1f21302c356af259cc32e2c9c0f734e28e063fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0985751de0ce7053e0e0d35ea1f21302c356af259cc32e2c9c0f734e28e063fa
Size

173KB
MD5

09c838645bf6d5769f4f0cc7b66a0a68
SHA1

5d9fe53f4e2cae05ea78f70bca4e7ef547302828
SHA256

0985751de0ce7053e0e0d35ea1f21302c356af259cc32e2c9c0f734e28e063fa
SHA512

1b3850735bba282f310af747957dbe9095ee6961697a2103f987d0b97064e9bba7a5950fca62a4d9167b9083189440964596063ab50a52a9fb8c9e17cb231462
SSDEEP

3072:SxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvdqkzk6t5uYZP:U2pdqfv2IPOGfXf5ovWvdNk6rrN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0985751de0ce7053e0e0d35ea1f21302c356af259cc32e2c9c0f734e28e063fa
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE