9d4cacee857b04740e46810243e6cebf9902f1ccab915f3af826f3d80057eca2 | Triage

Sharing

General

Target

9d4cacee857b04740e46810243e6cebf9902f1ccab915f3af826f3d80057eca2
Size

156KB
MD5

284b92c37941e237622fe6060552f64c
SHA1

8baacb16b5f7c4dff04d1f0b24a3fb73f6738a57
SHA256

9d4cacee857b04740e46810243e6cebf9902f1ccab915f3af826f3d80057eca2
SHA512

feaa778c78c7afac15f49678fe017a080940a9319ebe01c0100e1e2ee127c886cc4cd5749bcd40d9a0b48042a34708179bf947f835c708f2718f803788a8d434
SSDEEP

3072:Pyi7awjiVdK8J0GrFMs6TaB30EPWXzIy5GpR2mF5AoCEe7e9:Pyi7awmn/C3uOX0cce9Eeq

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9d4cacee857b04740e46810243e6cebf9902f1ccab915f3af826f3d80057eca2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 388KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ