9f86f9ad889fbd404582e467cb9758b5e413496ede5b7350120ef3b5fee654db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f86f9ad889fbd404582e467cb9758b5e413496ede5b7350120ef3b5fee654db
Size

292KB
MD5

771f5e76c5a419d67b9eba4b329350a0
SHA1

eb4a0752075e869958a5ec229231a31c4f28527c
SHA256

9f86f9ad889fbd404582e467cb9758b5e413496ede5b7350120ef3b5fee654db
SHA512

5d185266c7dc5c04c4965a27a8338cb2d70318838dc0e48c9c8d67dcfaaae84c2d539c5e332fc961c45ef1cef6dfc49c1c1c8221b19a7e9d37ff59888f1f88cc
SSDEEP

6144:0S9XVyogclZ+dw6Mz47M76itfpOBpefFXMEpiXB+WiJlFm79:0+XjlUwPz47oTfYBAFXriXB+WiJl4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f86f9ad889fbd404582e467cb9758b5e413496ede5b7350120ef3b5fee654db
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 428KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 672KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ