a2a0ad9af2ee2b7ebeba742550ea2429e196abad2b73b16994e70f59af1998bd | Triage

Sharing

General

Target

a2a0ad9af2ee2b7ebeba742550ea2429e196abad2b73b16994e70f59af1998bd
Size

135KB
MD5

9323d29ce49a9211930a388b105ef575
SHA1

f605d3e05656debe4c71cc953f7540d3ee39138d
SHA256

a2a0ad9af2ee2b7ebeba742550ea2429e196abad2b73b16994e70f59af1998bd
SHA512

01d43fdc40241eb176301e16253de48089d17728f8c652634ae0cb1ef4236ee474ec3245779db467cde24eba1f9b4a9cf4e3c1803b69a2aa3eefb3c25f696969
SSDEEP

1536:ajPzy7rAVb3n3gX72IEJ5NwE4G/a3hd+g/fLGpGx59LuIfOg6ol9SP:QPzyXANQX729D4G/aR3ThlpvlMP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a2a0ad9af2ee2b7ebeba742550ea2429e196abad2b73b16994e70f59af1998bd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ