fae7672003ac11bf4198d03b48a2b09026e407117c522a011b36386323e79b55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fae7672003ac11bf4198d03b48a2b09026e407117c522a011b36386323e79b55
Size

140KB
MD5

96ccf3ba4accb308df0f98aefbb65b64
SHA1

37608c80d8238ab4380b9ee1c8c8924af07fc213
SHA256

fae7672003ac11bf4198d03b48a2b09026e407117c522a011b36386323e79b55
SHA512

9aa341afc145e726f18c394a6d7b7d1dfa2143bd2d1ccf700e736fc7b7efcb40ddec72a6c0233d240dcc5f7b9cbcc4d9049193bb8699f2d5e5afb6b6d6896301
SSDEEP

3072:C1PELuIf/D91w+Z/96+K2MR6wFsyZbWFn7uBq2jS9nhXcrMg:C1SxL91w+Zl65iYOuo2j4nhXcr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fae7672003ac11bf4198d03b48a2b09026e407117c522a011b36386323e79b55
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ