6a282eecd210a5f44daccb89281f9743ab07efb9862066916012424ccf70629e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a282eecd210a5f44daccb89281f9743ab07efb9862066916012424ccf70629e
Size

607KB
MD5

825f6cc6b9f8d3c2ccb5fd5a24b0cd80
SHA1

2b39b85e0548f6796afbed28cf7df83132a5bb2a
SHA256

6a282eecd210a5f44daccb89281f9743ab07efb9862066916012424ccf70629e
SHA512

4637a5b5bde093e9cd8e6716b17e7c7d8332c8510f06a81ecea690c3105d146c63a15b9152ce79eeece8831261ae8a3e683dfb1a7361531dae1bffa0eb9ca324
SSDEEP

12288:AaKSQLRodeFFWNwsTb6eNoWI+3G9W4I3/b:AaGRod7NwsK+3Mf4/b

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6a282eecd210a5f44daccb89281f9743ab07efb9862066916012424ccf70629e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 513KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE