77292a0871b23762ffc3c65ce65ac2eb545ababead033741963888f9971241b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77292a0871b23762ffc3c65ce65ac2eb545ababead033741963888f9971241b3
Size

29KB
MD5

a322739a6af7ac53f96b9cd5b9b65b70
SHA1

d7cfe6ab91480e963197148361f7c92101d0a867
SHA256

77292a0871b23762ffc3c65ce65ac2eb545ababead033741963888f9971241b3
SHA512

a3efd2a4d29f3726145531a1b23ed977d5c60d7d2c2631b61cc948ce8bc52277b77c673ea2c3c1995a024c7c0f2e8669b46b5dd604bd5b876269f94274473366
SSDEEP

768:WqOExnM5fLs17vKzTHalKbFlFnETFpMtS:W4ZM5fLsG46FlFdS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

77292a0871b23762ffc3c65ce65ac2eb545ababead033741963888f9971241b3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xur
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE