52d783afe24721d164549158309cdd3d6f5605e13adda29a7949b9ebba40b46d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52d783afe24721d164549158309cdd3d6f5605e13adda29a7949b9ebba40b46d
Size

157KB
MD5

420e11aa20e69369c92226c1142289c0
SHA1

2bbecdd8426d27055422687906df4aa92da3191a
SHA256

52d783afe24721d164549158309cdd3d6f5605e13adda29a7949b9ebba40b46d
SHA512

a10f7b1dfa8e65cd71d35923088e317c8e3af1a0249ee866f441218942c8c0985200123deee9e15c0d4684c8fe72375ed21794b994678713b823db06aad5137c
SSDEEP

3072:BpGGMntH8/c5gnj1U+KLt7zChmuwfIA/1lg+S/RAhD5a7KXuClJ89G1:BcNV8/K2/2zX5tls2la7K+Clj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

52d783afe24721d164549158309cdd3d6f5605e13adda29a7949b9ebba40b46d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 327B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 245KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ