950758245d4db7ec482437580c93d4264eef7e4d4bf08d345db1ac9064d2626e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950758245d4db7ec482437580c93d4264eef7e4d4bf08d345db1ac9064d2626e
Size

63KB
MD5

a1673a53d997ace297fd87bb9bfa3958
SHA1

338afae05bf3c7ef50dc1d9492880d83290b8e5c
SHA256

950758245d4db7ec482437580c93d4264eef7e4d4bf08d345db1ac9064d2626e
SHA512

1c3b8c6f0e2f20af9b5edc9572ed3133e65e8a017a63acfa96a4a700b3c59e1517a1a5e95c6cccf3d362826e97bd9d91a42cafef6152295b7a11abcf10106179
SSDEEP

768:r4yS5yzaPEFrSnT+wW3+ybAL1hNcRvscDR0ORSGPcJa1nZFQFjSpTLHCaeJPSRCi:kPMK28yXu9NyBxgGUJsZQjQ/CaDx/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

950758245d4db7ec482437580c93d4264eef7e4d4bf08d345db1ac9064d2626e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ