42ff15c8470a210d2f94a1bfe1f9d2494564b6a8d9f6e9c4f248ec27f8d819df | Triage

Sharing

General

Target

42ff15c8470a210d2f94a1bfe1f9d2494564b6a8d9f6e9c4f248ec27f8d819df
Size

155KB
MD5

101886d36fb7202d16c6b8d6adaac7c6
SHA1

0ce4792bf317ba79024d5b62f079cf7565dccb14
SHA256

42ff15c8470a210d2f94a1bfe1f9d2494564b6a8d9f6e9c4f248ec27f8d819df
SHA512

2cb63cf628e2190e9a8e3244ca659290e1936eb135d5698ca04353d04ee337db904a13887d403f245ce4ca812578d8cbaf6465ab8d93bded5d5d15426d3ef84a
SSDEEP

3072:NL3vypA12+6hUn5IE8C3IqWNlr8/bmnTtbJ3KwiuiLgIj/+8lp:NjvyE1KEcbOTmnTxAxuiL1F

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

42ff15c8470a210d2f94a1bfe1f9d2494564b6a8d9f6e9c4f248ec27f8d819df
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pmglerp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE