af9122fab392dc0cc6168d6dcaba79050a0700313196d9720dc8a301a47dfba4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9122fab392dc0cc6168d6dcaba79050a0700313196d9720dc8a301a47dfba4
Size

1022KB
MD5

8375cb24bb57816d41ffe5a172908d70
SHA1

abe558c350fd33f562d57ed65281f2122d98374f
SHA256

af9122fab392dc0cc6168d6dcaba79050a0700313196d9720dc8a301a47dfba4
SHA512

891c05cfbbca3b3fbfcc15d7e93a66448994fc5154ce56e221cc807a7b7b87e7af2a64b84b8f0d15a10c88048f491bdaff60ee29a5d0f0a18cb72e5abff57f1f
SSDEEP

12288:3POVJ21sP4N4x7dys6nO9JDSyUHyfBFc3QsIXSj9Tc3TnJHVcWFKp5oz:3P6J21f4wspwsENIiZc3LhnIW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

af9122fab392dc0cc6168d6dcaba79050a0700313196d9720dc8a301a47dfba4
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 950KB - Virtual size: 952KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 880KB - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ