9195e37273a9e5c24957dc40113b502ac54372b6a37d1fbc127ac72fe2ff4b3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9195e37273a9e5c24957dc40113b502ac54372b6a37d1fbc127ac72fe2ff4b3d
Size

360KB
MD5

81d545317bf91154c5e19d28a75a3424
SHA1

aec6f267cf0a0e4dd91daab8fd3a456fd0e8f391
SHA256

9195e37273a9e5c24957dc40113b502ac54372b6a37d1fbc127ac72fe2ff4b3d
SHA512

f7e2f07bb240bbea4b76591f199a29972a866ab4762a48bd0bd6679d6856f3703cb51bf76ecb67c407db24cd77ad0a2a07156f1fcca11da237bcaa153ee92285
SSDEEP

6144:jWal19UkcI9zTM+Icrz8URl+KPvvuT83gxPVU2/G7JW26IsVPR95kW1rHk7Ia3if:jWW9UoPRl9vunPVULsc0R3kWdHk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9195e37273a9e5c24957dc40113b502ac54372b6a37d1fbc127ac72fe2ff4b3d
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ