9f0bf1ef3c3cf7226ffce98a62a7079998ae99774f3b6388f983ddb9de24d07c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f0bf1ef3c3cf7226ffce98a62a7079998ae99774f3b6388f983ddb9de24d07c
Size

88KB
MD5

a3015e38471f9d4a920f2a205ba4ea80
SHA1

68c46b2cc14ee786678269bedcee4fbdfd2380de
SHA256

9f0bf1ef3c3cf7226ffce98a62a7079998ae99774f3b6388f983ddb9de24d07c
SHA512

cb59a3bdb008aa55c2c7d5eb2212a9b79f9bccbe853d6175f8a322c3d9563887c68a829e4a534523b62b5046c6f26a95df0502618bba95f7d0bbe70c8cb26512
SSDEEP

1536:BwdkzQIK+3FofDML/5d8Cx72QJ+Q6WoY06Vmq20M/9Snp14Dv55sNG:SyQ0Vo7q9+Q/ZmXT9A4Dv5+NG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f0bf1ef3c3cf7226ffce98a62a7079998ae99774f3b6388f983ddb9de24d07c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ