a9fd45c496b410a7d3144f71fc4ed9091f8963ab9fe489bd8c71185cf6b1bb88 | Triage

Sharing

General

Target

a9fd45c496b410a7d3144f71fc4ed9091f8963ab9fe489bd8c71185cf6b1bb88
Size

30KB
MD5

901ec5d3992851a161011fb8f6029830
SHA1

b6e0f3cb88bbc3ffd757be9d31d8f04429e96bed
SHA256

a9fd45c496b410a7d3144f71fc4ed9091f8963ab9fe489bd8c71185cf6b1bb88
SHA512

f8d5abf4e4ba1bf7179af85b02e121cd25600f60911c1e0255d2103f8542bc01d1985d21155657d139808fc2327392c9cb59933adf5763759366af0bc9306a71
SSDEEP

384:FZcpzCIqdG3A3WUkx38GZDJuJbf1+o44u8gHzUbJigK8OP5e54faEyQ5n9RXLq9d:SCIqdH/k1ZVcT194jp4bs05gn9Jcnd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a9fd45c496b410a7d3144f71fc4ed9091f8963ab9fe489bd8c71185cf6b1bb88
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ