b9f9528b0908e826c06d87273fb54a0b480cf97d8741f8e54896cc8ece3dab9b | Triage

Sharing

General

Target

b9f9528b0908e826c06d87273fb54a0b480cf97d8741f8e54896cc8ece3dab9b
Size

407KB
MD5

8299f0a934b6682c6327c0fbe33e1c10
SHA1

1969a33ef647b710d06ea5455e8a1d90b6cb6969
SHA256

b9f9528b0908e826c06d87273fb54a0b480cf97d8741f8e54896cc8ece3dab9b
SHA512

d534d2bff5a9ae3fec3b827949acf7cd1a60e20dafee9ffd5acb033020a101258482e3711d9879ecc9fdea6f0d3e677a065a3624fcac8a7a6f7841abe4a44f45
SSDEEP

6144:AKuhwleY8OSDRpOH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uTU:AJhlZiH2EB0NxDIBuOFe7/uTU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b9f9528b0908e826c06d87273fb54a0b480cf97d8741f8e54896cc8ece3dab9b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE