9241b98f0547efc2dceb7c21288e796054a138dbe581fa8c5c5f31bef1a1808a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9241b98f0547efc2dceb7c21288e796054a138dbe581fa8c5c5f31bef1a1808a
Size

10KB
MD5

7b449fc14ac4ed33d828d70367dd9361
SHA1

44064f97b839e6c421c1b52c9cf2e8395dd2f890
SHA256

9241b98f0547efc2dceb7c21288e796054a138dbe581fa8c5c5f31bef1a1808a
SHA512

c74a66c349bc12251248119d7047cd264d707549cdd821a2693710df7a8e114cf0195c1a26aeed654602ae91edd4534064f14fa39644c8801c8edbe55315d301
SSDEEP

192:0x6TaCnTVjhCKeMGWKxK0y/8hk50tv/V2tsUsqHbRfZ0UA:KNCnGVMGC05+e/u1HbRfZ0B

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9241b98f0547efc2dceb7c21288e796054a138dbe581fa8c5c5f31bef1a1808a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE