9344b751bc20b261bac2551872cd1d0af755fc338d07a7043c725391db18ca26 | Triage

Sharing

General

Target

9344b751bc20b261bac2551872cd1d0af755fc338d07a7043c725391db18ca26
Size

381KB
MD5

eaf983bb0c93ed4b7325437df4d2fa4d
SHA1

77b67743a34246d758b38f22a887e623cf9d8c76
SHA256

9344b751bc20b261bac2551872cd1d0af755fc338d07a7043c725391db18ca26
SHA512

3e0d0ce0e32dd9655bbbb0fbdec70c86a99f703e999215ca150338b5bd18eb18b13aa4873a2af7800a403442b49394bc15883df8e2dc89de72d690c1cb2e7dbe
SSDEEP

6144:PjWhYEQk1BqSUCmf1kLnYsxPMU00DjTCViMWJoy7AJbNdRIDwBgxEu9BgkcfI/N3:ahYurqSdmGZMl0LKiAJb1IDwBlq+I/6G

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9344b751bc20b261bac2551872cd1d0af755fc338d07a7043c725391db18ca26
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 377KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 327KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ