418d18b36aff0b1cac682aaa07ad125959f9da05859922c612dfc5af54720a23 | Triage

Sharing

General

Target

418d18b36aff0b1cac682aaa07ad125959f9da05859922c612dfc5af54720a23
Size

92KB
MD5

8404404fbfe9d27e3c793feb869e00f0
SHA1

6ff0fae4057c3733516cf2f533673901e0f4465e
SHA256

418d18b36aff0b1cac682aaa07ad125959f9da05859922c612dfc5af54720a23
SHA512

36fb090570313374b0793cad17aeb0110184066a5ff0bf981d414741ca30c681d6ad2b5566674e622b2f5905e9e4517c2375d2fc79dc25c85d9044f5c6dde850
SSDEEP

1536:ZW/+Sfxyh8JeMhM6YmvYk9oMFC7n2JlFEMovcZYSyouJ88T9t8Mzu2YoKkqlr+kP:ZMb5bBMPmr2MFC7nClFij9KMlwhm2ksz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

418d18b36aff0b1cac682aaa07ad125959f9da05859922c612dfc5af54720a23
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE