85000aeaa03693846aba778fb148364e1b37b92dc7461dd8f824ba2367f21bb1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85000aeaa03693846aba778fb148364e1b37b92dc7461dd8f824ba2367f21bb1
Size

335KB
MD5

7b3e4ecf63a219aa6ba2376c15041ef0
SHA1

3b98eff8d2acd8949648a429fd9a129e59c4d1be
SHA256

85000aeaa03693846aba778fb148364e1b37b92dc7461dd8f824ba2367f21bb1
SHA512

31bf56b65442c9693fcc8b73f0fabb0e2b24d8400602b3bdbbca90db91b7b434cd5bf2a0129678e0505f7a5e9615b23c972ac193f81d79b57cf37ab4de509079
SSDEEP

6144:kwOttnKwq9SAcEcM/4AqzgZVkZDyyH4DpcSlJf2mglg7Mx5SqqlMWEoJW:kp7JTqcM/bqbDRHMDP2m7Mt1WE2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

85000aeaa03693846aba778fb148364e1b37b92dc7461dd8f824ba2367f21bb1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 308KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ