890615aa784f0e4c6ae311efbcf1714e9b2407637edd3682ab32bac7db1c04d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

890615aa784f0e4c6ae311efbcf1714e9b2407637edd3682ab32bac7db1c04d2
Size

10KB
MD5

4ffbf2ee93beae7753e4a7ce7f618750
SHA1

8b93111294c97d175c07c2ca3a6838c6f7c0bef3
SHA256

890615aa784f0e4c6ae311efbcf1714e9b2407637edd3682ab32bac7db1c04d2
SHA512

9997e8273e991ac794948da41550af812af3b13f44d96b4e8c044d82b95b94b80834bba083a630d066e37a831bd85efb50d08bfebc82cbbf5e8dc107bdbce35e
SSDEEP

192:q8w8m/jaKn1y7h1V6fDDzl7fAyvO9xKOXvTWqhzHkmDaWm4KWLRgH:w/n1sqfJWpSozeWm4KWG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

890615aa784f0e4c6ae311efbcf1714e9b2407637edd3682ab32bac7db1c04d2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ