aba94dbd2ff4883abb8c1cecb9a90647178bb51768d16da21e3e6f00c8e6255d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aba94dbd2ff4883abb8c1cecb9a90647178bb51768d16da21e3e6f00c8e6255d
Size

214KB
MD5

25605d97e58d5fe3084c35a6eeda16aa
SHA1

07689f6f826ed97a2c622162712a89db5d712fe0
SHA256

aba94dbd2ff4883abb8c1cecb9a90647178bb51768d16da21e3e6f00c8e6255d
SHA512

596f5b3df0b585a3eb26681ff82095aa0976853b90185741ed488ca1d0c4a3e96d0327e13ea546e027cec9c1b533facf9b2e20b6ee36880ef98a5c7bdbb9e795
SSDEEP

6144:At5Q/OgpQNhBwo53PMvx6zaOpnN99s+98gg:FmNhBP9uPYvF98R

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/Patch.exe	upx

Files

aba94dbd2ff4883abb8c1cecb9a90647178bb51768d16da21e3e6f00c8e6255d
.zip
Patch.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iOTA.nfo