2aa1ce59887ad580ddef778e9baa0c6c033807e378fb0acba39fdde17ac76827 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aa1ce59887ad580ddef778e9baa0c6c033807e378fb0acba39fdde17ac76827
Size

714KB
MD5

0b20c8215bdd4980db66ee5a38ec47d1
SHA1

4f7f4141bb771c0a7620cf914e6ff07d1f774065
SHA256

2aa1ce59887ad580ddef778e9baa0c6c033807e378fb0acba39fdde17ac76827
SHA512

b5c0de55eda2faebe3243fa375fa151eb6c561ad78e77100870989fdd99666535ad18a3a02c39868d29971210d27847b41160085421dbf655e09e7932c486c94
SSDEEP

12288:LSo6xg5kN530xuooqMVwsglVln7sYYK5/7+XSbOYo:P6u5030x+gljn7sYYK5aXsro

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2aa1ce59887ad580ddef778e9baa0c6c033807e378fb0acba39fdde17ac76827
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.xdata
Size: 260KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.UPX
Size: 239KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE