79254e014d2747f1986fd30e11c7fafe1befa3bf625f32f437d01a5f028b2bdd | Triage

Sharing

General

Target

79254e014d2747f1986fd30e11c7fafe1befa3bf625f32f437d01a5f028b2bdd
Size

18KB
MD5

93837f153e66dbff5a24dc2903ff7de0
SHA1

9924b7e6ba7ff6fc1b4ef83854258065e4f1cd2c
SHA256

79254e014d2747f1986fd30e11c7fafe1befa3bf625f32f437d01a5f028b2bdd
SHA512

9865c09ee713cc46361cffaa7fab43c75426a8a32e5be2de89d8498b9f793b3780b1180dc8fba772e4684a5b13ae5a78c6e5a2ecf6b5408c0247ee584a73e0ce
SSDEEP

384:gRg+uJpACBWHmR+xMwb5GcKyi5fYXGZ5U6EMHO1:1J2CQ3MwbpKy41nEMH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

79254e014d2747f1986fd30e11c7fafe1befa3bf625f32f437d01a5f028b2bdd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE