49dcfc7035c08209597d84b96d4eda127bfbafa8e02eb3c0379f6201c328da35 | Triage

Sharing

General

Target

49dcfc7035c08209597d84b96d4eda127bfbafa8e02eb3c0379f6201c328da35
Size

22KB
MD5

a2309b93e92eb5ca0f73ea2dd6491335
SHA1

5b69decff1ee62168f9f70169a0bb1e5ddbc247a
SHA256

49dcfc7035c08209597d84b96d4eda127bfbafa8e02eb3c0379f6201c328da35
SHA512

5bef97b9aa710c74a43a0018f9c30d93a7f44cbf93e8669ecb3cea7d23bfe10cc99221208dc317760eddd56ed09ec5bf292f03135baa0d544ee62c49a31615b5
SSDEEP

384:z6EWMBiaYjwwrI7ofsrj4ikRa/NfGuJUQ6PeQ7IX4zo16QKKSO:zvWwiaYjZE7ssrHcQAOn6WmIX4o6n3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

49dcfc7035c08209597d84b96d4eda127bfbafa8e02eb3c0379f6201c328da35
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ