98c6fc7f4e9ac19a1be6af9607db2eda6df481c526919500dd9387f8e689d07d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98c6fc7f4e9ac19a1be6af9607db2eda6df481c526919500dd9387f8e689d07d
Size

138KB
MD5

045f8b02d29308cd2ba0e3cec2244b9a
SHA1

9ef762699aaffdcdf8beb47df3a5746353d98f54
SHA256

98c6fc7f4e9ac19a1be6af9607db2eda6df481c526919500dd9387f8e689d07d
SHA512

cb830c7ea493ca1f1699f93d193e4cbab86bc663b62844d9a1576a9ce4d66d0d96ea0ff8d198b2572c53328a6f59ddbdc5c49662ecf86f0b49cc4212f33641cc
SSDEEP

3072:5rMI/wBLMzKqpQujnSabibHPR09db1fDP/iUzK2yHmcnpzn:5rbIwzKqpQgn5WbvR09db1fDSIyH3np

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

98c6fc7f4e9ac19a1be6af9607db2eda6df481c526919500dd9387f8e689d07d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ