442b2343d5f6b94f14157cdaa9f9929422783371b699d8b0452696f47335c115 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

442b2343d5f6b94f14157cdaa9f9929422783371b699d8b0452696f47335c115
Size

49KB
MD5

187ab2a77886c873b98e75fa45431f60
SHA1

b8f4c0f6e6023b96413fbc489262c8efa4cfb133
SHA256

442b2343d5f6b94f14157cdaa9f9929422783371b699d8b0452696f47335c115
SHA512

687548caab36597e190c98bb053f9785f124b6d2e5defd45e4968cabb1fffac3e1a9bf477b340b8387dc8abd14352759f2b8e8004f7017f6b514747615060dfb
SSDEEP

1536:SNqaLV8a6o9BJ7m3LZ7RdGHTLGgtTwRe1:SNqM/2lRd6TaRi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

442b2343d5f6b94f14157cdaa9f9929422783371b699d8b0452696f47335c115
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ