95931759f761aa2e307bf1499af4cde85c264ed67f64e1b3d8451021fe9d60dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95931759f761aa2e307bf1499af4cde85c264ed67f64e1b3d8451021fe9d60dd
Size

70KB
MD5

9166613bfc3413ef5bd14b2f3f805867
SHA1

55c0f358fd1bc9dcecb53541a3d85ad4a505f085
SHA256

95931759f761aa2e307bf1499af4cde85c264ed67f64e1b3d8451021fe9d60dd
SHA512

9e996b6d6f5c7fdb31875f4d6e54bf5c97d51cc64a1a38585d7cd43ce657318c07ea71dd3bb6bab6c51b9e804b50e1346ddf3e776db41ffdcc16c6901d9b9c1e
SSDEEP

768:7BxZkRQh2VWGstiSSWDfThplIcpmiBPh5iE79gD0sgDmGU/kF4EJRQV6rEHfUf+I:7BxAJatiSZrUiBPfiE7qR+MAEHucOzR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

95931759f761aa2e307bf1499af4cde85c264ed67f64e1b3d8451021fe9d60dd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ