884c494c4df31cbab3cd3cf5ecf10b825205b35757d57c2ae65714508765e9b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

884c494c4df31cbab3cd3cf5ecf10b825205b35757d57c2ae65714508765e9b6
Size

73KB
MD5

af2afc6e8094480fb770d403885ad9c5
SHA1

197ddef944c1360f4b95a31f4458d95dc8f80700
SHA256

884c494c4df31cbab3cd3cf5ecf10b825205b35757d57c2ae65714508765e9b6
SHA512

69da90c7f9accb00d146688891e887fdd5d648db576c49c20f9444311de48f6368aa71714f8c06069283056015f9d1cde0c0cb933035af700417ddc65bf5aec5
SSDEEP

1536:ECRN0Yw/lUvh+eUSneOq/HdOJmdiiLjSPuGdUFjvk8VDxdAXMb:hRNslkVUSeOq/92UiiLjcn+jv1DxyW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

884c494c4df31cbab3cd3cf5ecf10b825205b35757d57c2ae65714508765e9b6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ