da0adaf71bea21c70cae6f1282d2e31fec00442d54b8015b1bbc794a40033630 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da0adaf71bea21c70cae6f1282d2e31fec00442d54b8015b1bbc794a40033630
Size

716KB
MD5

0111d80667e3902821764ada86ab5bc5
SHA1

6c69c1079ed89f214e9662975cfe759e81c2afb6
SHA256

da0adaf71bea21c70cae6f1282d2e31fec00442d54b8015b1bbc794a40033630
SHA512

959378777de5c4400035c2c0b5f73c332e2c5cfc39c40ec2a4ca4d9c94184b86cbbf3d9336b599b79c95a4a7882ab3ce253406e5ee05eaf996166532357160ac
SSDEEP

12288:bmYsGZLzUVCLQyIbP+tk7KO5SkyF0m167XhgswBsL+rPsKsRfKpxdgWLpGDpSfD5:vbZLzRQyIbPYk7KQPyFLyhguS4NRfm+Y

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

da0adaf71bea21c70cae6f1282d2e31fec00442d54b8015b1bbc794a40033630
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ