a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2 | Triage

Sharing

General

Target

a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2
Size

43KB
MD5

7eda7e667e184fde8b39cedcc058f95a
SHA1

00e61aeacc5a3dd697d921a291fe39ab182d3967
SHA256

a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2
SHA512

1d88f814a34413e72e352d7712d19b6a61330f6dafa4cb2dd989ff38594ce4967771786a0ded062fa7d7e1ba42c26a78d63b6a2abf231ec151c8b9ec69007e80
SSDEEP

768:aWgJgFrAERfvckKRb19VObGNHQdq+1hb6TJ2Jr5ZkmELR7xeMjypEK+T:9FTckQbpqP1h+TS4mKR7khN+T

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a7721a5f3a20a87a31c07dd67b26a5653bba543934541f31d0eb67de351f7ab2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ