a7d63f104dab54f0f3d07892a8eaa2c20daaaacdaa53ef5dc08290bf542facd9 | Triage

Sharing

General

Target

a7d63f104dab54f0f3d07892a8eaa2c20daaaacdaa53ef5dc08290bf542facd9
Size

77KB
MD5

96a2a7e73893ccda6706e48fab100260
SHA1

16e52933776f144280ba2c274cf03b7be75e9b4f
SHA256

a7d63f104dab54f0f3d07892a8eaa2c20daaaacdaa53ef5dc08290bf542facd9
SHA512

149f30a67d8d39e399ee92cefc22883e6bc427448f9ab1a4a4f752de0799929a681bdb87fc87d11bb764ac7bf6efe20c27f0c0929788fbcc09a31fd3e7f1fc90
SSDEEP

1536:FnrGaHuCaWbSCNMS7JhtEHpsmGpJjKWBE55sKRLSntF1pEO4eILfcqHUP:FnhHpHSS9htEJshpNw5PdSntv8LcmUP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a7d63f104dab54f0f3d07892a8eaa2c20daaaacdaa53ef5dc08290bf542facd9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 872KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 892KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ