baf809cac16d47406b54e75c6605edb309e4d17aaf3366e4d450dbd9d2d79a39 | Triage

Sharing

General

Target

baf809cac16d47406b54e75c6605edb309e4d17aaf3366e4d450dbd9d2d79a39
Size

20KB
MD5

6eef2913e9aefba94cf1ec1ca5520d8e
SHA1

6805be988c192a166a6aa94ef5c80983c9c233ac
SHA256

baf809cac16d47406b54e75c6605edb309e4d17aaf3366e4d450dbd9d2d79a39
SHA512

0191a8fad7c9d84add6e8e677d012346afc5ba3a3e49ebfa5b96ea0edea96c07b1b71f4e8c6c7faf88108ccec354ed507568013077de0a9308a6a633467b3921
SSDEEP

384:zHz6AWjDlSWUYjI0KqJC7aUiZH2z+jcbk4WhrhUaAjjJZM:Hbc1jI0KqJdUiZH2QKk4mVUag

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

baf809cac16d47406b54e75c6605edb309e4d17aaf3366e4d450dbd9d2d79a39
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ