8827994b6e9e5ec8cbc09e8163bb8e796111d498036c6d7061822eaf826bf1d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8827994b6e9e5ec8cbc09e8163bb8e796111d498036c6d7061822eaf826bf1d4
Size

775KB
MD5

800117da3a23f9df7488fa3c970b53ba
SHA1

b88e6a1965c05309622f1c6991f85f8e8ceabf2f
SHA256

8827994b6e9e5ec8cbc09e8163bb8e796111d498036c6d7061822eaf826bf1d4
SHA512

d23c1eec3f1420dc723fe04421699fae69a7df2f472df32ba1398444f3b03a8d7a39479276a3d6fd3e672fae7dc1acdb10cece27ca6e304d2c6d79d978b6eb8b
SSDEEP

24576:rrS7ufnfB/rt6/ZZlFPH+E+s4X1u8PMD2gd1ov:rrSaffe/XlFPhG1u8UD2gd1o

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8827994b6e9e5ec8cbc09e8163bb8e796111d498036c6d7061822eaf826bf1d4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 771KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864KB - Virtual size: 860KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ