dea4dc8f3556b60ee5f9412c0869fb426afb3e48ba4f114c5ff81ad0729657c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dea4dc8f3556b60ee5f9412c0869fb426afb3e48ba4f114c5ff81ad0729657c5
Size

125KB
MD5

05cd975973623a62f7d127a0f53258c1
SHA1

b97ae3d7b00aea56da3e133f681ca9ce815a7fe7
SHA256

dea4dc8f3556b60ee5f9412c0869fb426afb3e48ba4f114c5ff81ad0729657c5
SHA512

bca87b56c4a9406b5d9e3af6f30f2d58b286749424b2b7a2e730ca430e2f98740ff8b95ca2b8c64d87c12137bb00415ceda789902185a6847761fa1d562936b8
SSDEEP

3072:otJ6Ypo3U3zGNCgDvKz1jYjfiS4dTCGv:y83iaCgDymP6Cc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dea4dc8f3556b60ee5f9412c0869fb426afb3e48ba4f114c5ff81ad0729657c5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wlqiczz
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE