73efc662e1a1235e8c9b39cb1b32d3a353ffa77fa2df25fb272d02d0f79bb9b7 | Triage

Sharing

General

Target

73efc662e1a1235e8c9b39cb1b32d3a353ffa77fa2df25fb272d02d0f79bb9b7
Size

131KB
MD5

0982e75ca3ccc336c765ebd642e287d3
SHA1

53b6fa6b0dd73c54643d3326bc7b65d25fbf8764
SHA256

73efc662e1a1235e8c9b39cb1b32d3a353ffa77fa2df25fb272d02d0f79bb9b7
SHA512

1300fd7ae22c3a14576033379517ad317bd5f72be1b0c972bb675e0cdbddcdb669258745403209ed2fcfe383da3ad82d1f51644b9469cfed8f6117436c0dee90
SSDEEP

3072:BC868JSfgM9UevQpg7JUzdbJPAzQCujnHOkEEilnDT:k8NEgUlKsULPAzt0nHOkEEiln

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

73efc662e1a1235e8c9b39cb1b32d3a353ffa77fa2df25fb272d02d0f79bb9b7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 384KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ