733e0ff60136da0c5fef3e16aa308abbf2b6b289fc8a6dedf03428dd5ce295bb | Triage

Sharing

General

Target

733e0ff60136da0c5fef3e16aa308abbf2b6b289fc8a6dedf03428dd5ce295bb
Size

129KB
MD5

425af69bdb7f1c8021a92fe8434292e0
SHA1

5c05d92b04b9b0c0ca56579e6ec5140969e4f7ec
SHA256

733e0ff60136da0c5fef3e16aa308abbf2b6b289fc8a6dedf03428dd5ce295bb
SHA512

cd01f0ccb1ca206e0079c52cb8d06b1f5f2f75e8ef22a3a75ffcdd9b7e35ac1bbdc9448f102b05c31b40f0f77de0fdba5f166d742938b9c4076d6e25a9ef56c0
SSDEEP

1536:jtHGPPi1JefE1ubgAgmW3s0qPU1KvqVRvLPpYl+BCcyq8dcClcjwVbsif7x6LIlH:xGXUeRyq5CpYsBus/jwf7x685IPeoO

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

733e0ff60136da0c5fef3e16aa308abbf2b6b289fc8a6dedf03428dd5ce295bb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ