75e9fef1d1ebc84eee03ab590308aa15f4c630c578504c9729fbd6fb704fc4e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75e9fef1d1ebc84eee03ab590308aa15f4c630c578504c9729fbd6fb704fc4e7
Size

1.3MB
MD5

9005c9eb0b6c7f844fbc099d9152fadf
SHA1

b54c85005691ee3192018ae045bf903c84328e94
SHA256

75e9fef1d1ebc84eee03ab590308aa15f4c630c578504c9729fbd6fb704fc4e7
SHA512

cf857b78f178fd595c9df71d361df52bf81e2df544f40f5dc4e8821de66a7d1e9c03edcf94b433cb62d617ab5f0733ff246a0556dc314dc71747f8badc02c105
SSDEEP

24576:Ranhl/rXawfF3BVA9EN9NLzLRPJDovKg+ju/YPa1SKriJ83sw3bRKC:0nhlDawfrYENbLRPJDBz+zL3bD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

75e9fef1d1ebc84eee03ab590308aa15f4c630c578504c9729fbd6fb704fc4e7
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 962KB - Virtual size: 964KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ