a7672298d178b022b401b4369b693651b4ce8119a9353a6e1d86c0e86f15c444 | Triage

Sharing

General

Target

a7672298d178b022b401b4369b693651b4ce8119a9353a6e1d86c0e86f15c444
Size

72KB
MD5

f695df0071dcf3f1b69b44552e47dead
SHA1

eeb58a68bb112e7cb645418f4a7ce3fc29f661ee
SHA256

a7672298d178b022b401b4369b693651b4ce8119a9353a6e1d86c0e86f15c444
SHA512

26d78fa34e3bba8064ac0f5dc907835c8f0dc9bc80fbcb40735e6a73aa85af2f8925a171b31620d81a620a525a43da8604905e6d719293a935baffee5a325178
SSDEEP

1536:3MEhjntG2JCOwc6DTPe+jCcu0x9+5s/4CXwlNXtTSLHK0KwYu:8Ehjn4ehw732uCaSs/4GYNdgNKwYu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a7672298d178b022b401b4369b693651b4ce8119a9353a6e1d86c0e86f15c444
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ