989002413ecffe2e188f5bedcdf88274e9cfb8c1e85c5bcb9194b4ac5654ada2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

989002413ecffe2e188f5bedcdf88274e9cfb8c1e85c5bcb9194b4ac5654ada2
Size

451KB
MD5

0e3ad9da8c15d76b9eafa4eaac3f0510
SHA1

135783564791eda156b00d5be4dbd34f9e14c93e
SHA256

989002413ecffe2e188f5bedcdf88274e9cfb8c1e85c5bcb9194b4ac5654ada2
SHA512

505d2bcba49119d6279301cfc87237d3d3b291b0f59f77c1ee5194f7aebe60656658b2bb5a5816398cc1be7fb2309bec980a368a5a0fbb3acbcd1f4b6424f9b3
SSDEEP

12288:s21IFXyHFB2Dejd3s2PG1hgToZ5b0TeNrVxZ:sUmXylBhhsgG1hqo/06r/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

989002413ecffe2e188f5bedcdf88274e9cfb8c1e85c5bcb9194b4ac5654ada2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 264KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 445KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 288KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 376KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ