4d9eb42607f458e0ed997afcc3f101c7279d344cbf203bd8635eb469c75a323a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d9eb42607f458e0ed997afcc3f101c7279d344cbf203bd8635eb469c75a323a
Size

794KB
MD5

663017f1d8a6342b6b591074c581f560
SHA1

792d7fa3d6167c9098a70a7a54ad6150fc612f35
SHA256

4d9eb42607f458e0ed997afcc3f101c7279d344cbf203bd8635eb469c75a323a
SHA512

138068501a084d79490ca1d775b2d1df9c6e6e0e0afcd55949c70ddf07d48828c259b7598919a2501ef6d4776c656d2e43d2a876af2dc56da78cad438482c1a2
SSDEEP

24576:lm/DKnxYaXJi2Y3MpbwnCvzb4cbmYdTyVD:lMDkYOMwwnMb4PmyV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4d9eb42607f458e0ed997afcc3f101c7279d344cbf203bd8635eb469c75a323a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ