afcf2979a03ecf60292dd1c0c7ffe11dad8eacb62b6166b1de82c36a333692e4 | Triage

Sharing

General

Target

afcf2979a03ecf60292dd1c0c7ffe11dad8eacb62b6166b1de82c36a333692e4
Size

331KB
MD5

81625a06754f3d589d1991e6a24d8c42
SHA1

7a8c7765729d585290a592a532d0f2b58d7dda01
SHA256

afcf2979a03ecf60292dd1c0c7ffe11dad8eacb62b6166b1de82c36a333692e4
SHA512

a6cfd90da1fc59631b29fc981f74950f27a15b4bbb26e3a53b38f3015307c03f3b0e170242cd6013054fe6a83533839c0dfdcf198b7e77512c2d7e133006de46
SSDEEP

6144:FYZTNk3D6LyUXwLLk+cR3qh0GQ43VJRD0ew+/UOwz:FSNC80I+cR3R03VseuOwz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

afcf2979a03ecf60292dd1c0c7ffe11dad8eacb62b6166b1de82c36a333692e4
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.EUPX1
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE