400f545dd4feeedd5a5aaa24e2d72d7f7540248ae0f4d0a309374237f892c9c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

400f545dd4feeedd5a5aaa24e2d72d7f7540248ae0f4d0a309374237f892c9c5
Size

735KB
MD5

0b178969a022b1e7b19454ff45d6b272
SHA1

01038d69a268e4df6ed1c54c39339de52e45c729
SHA256

400f545dd4feeedd5a5aaa24e2d72d7f7540248ae0f4d0a309374237f892c9c5
SHA512

09ce33eb9d88d58c89d820ede988a50876f0630cd3f661a6e640fdf8833ea51efdd79a95b398f59eeed38a221c368890d2de1161fe763dfa5e29b659e98a6734
SSDEEP

12288:yMgv85op8bJXH3xPU6M9siPVMZSkzXxZCvl/+xmNqjqENAQNyOseTJMIB:yMg05oSbdHhrQtKZSkNZCtGxCqppJB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

400f545dd4feeedd5a5aaa24e2d72d7f7540248ae0f4d0a309374237f892c9c5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 720KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MMM
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE