a0f06e961055a6f828dac5094cada5774970c9f2fb6ef2df0f20a6e4c5b7eb3a | Triage

Sharing

General

Target

a0f06e961055a6f828dac5094cada5774970c9f2fb6ef2df0f20a6e4c5b7eb3a
Size

856KB
MD5

923cb891a926ce2e082e82df935e3480
SHA1

fd5928677e0e7bc5aada06d3e372b5007eb9837d
SHA256

a0f06e961055a6f828dac5094cada5774970c9f2fb6ef2df0f20a6e4c5b7eb3a
SHA512

0951043896ec53feae0f90abc9c0b20d5d23d85280e0743086564e922d4e9bd8acb32f139908eef094a42c846a9c6b29705b25b1c28e7c68d4ccac793986228c
SSDEEP

3072:c8Rlf5+ubBPcqwsL01BnLrGrgC8+jKn+aO9NXclVLCKIN:PTBcx19YgC8Ukq9NXcHNIN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a0f06e961055a6f828dac5094cada5774970c9f2fb6ef2df0f20a6e4c5b7eb3a
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RUPX1
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE