faf9aaf8892223aee172e2f16952614b150054b10ef11f4053f0546ba3c8acf6 | Triage

Sharing

General

Target

faf9aaf8892223aee172e2f16952614b150054b10ef11f4053f0546ba3c8acf6
Size

416KB
MD5

38392f8760ff0112b581513d667cdf4c
SHA1

27a629f4906ab9c509048276b4b359d9a517d2aa
SHA256

faf9aaf8892223aee172e2f16952614b150054b10ef11f4053f0546ba3c8acf6
SHA512

f431a7d1710571744db1e2631e6f5694366d663401acd5ba475bdb2719195da1c6dd9f90270dcbaedf6af922103ddaa37a513a9cde8d05612341d3b658e88cf6
SSDEEP

6144:YsdbaZx/8B+q2cWNIUHwHU/N2KBJXB8RPozWuhjkl24TOwx0/+pyjzI/oSbY:BV+++cWNRLv7kP2S2IuzI/oS0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

faf9aaf8892223aee172e2f16952614b150054b10ef11f4053f0546ba3c8acf6
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 868KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 378KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE