8a4e0e39b16b3e1c490589cb22da8d48768e5be6cfa109d4137a7c1ffe2e8a48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a4e0e39b16b3e1c490589cb22da8d48768e5be6cfa109d4137a7c1ffe2e8a48
Size

841KB
MD5

0487541941d6264cb902709c185c67ac
SHA1

9c5966740b10ff9d9bba85a2a367e1dba9a59b94
SHA256

8a4e0e39b16b3e1c490589cb22da8d48768e5be6cfa109d4137a7c1ffe2e8a48
SHA512

fb8586fc76b498c8ba066d48503da2a9a1f73ca8cbb30ae5255c186550de604aed4c07608a57883d8650a57106427cb9284b68f0f848f43c2fd236ac5788486b
SSDEEP

3072:ZTDRyyF376K115CIAk+yRQUr02D1f0nZzBbQpS7qQZvUZ9Tab:ZTDRLFL6w5tYyRQT2pMZBmSI0b

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8a4e0e39b16b3e1c490589cb22da8d48768e5be6cfa109d4137a7c1ffe2e8a48
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1UPX1
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE