44a3aa44c95384cf016ef041f19b51f4a951709aab419484fa4ef80f61c1b1fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a3aa44c95384cf016ef041f19b51f4a951709aab419484fa4ef80f61c1b1fc
Size

380KB
MD5

4b1bf3ce8694c8a99e530239922753b2
SHA1

1980991e92cef06b89dd62f914d79736afef6b71
SHA256

44a3aa44c95384cf016ef041f19b51f4a951709aab419484fa4ef80f61c1b1fc
SHA512

41a6251b8751a1b8bd10286e5f4164969189f66c84bac1e4ec8713e886afd01f08cffb733cd086dd8abdf0a5c8c4b9f55be7d0a834c9a6ff3f0dc18ab456be7c
SSDEEP

6144:6EopDoytukEzLjyy0s7kC4V/hOuwAPhrrqm4adqltqL9pGs8+/HJ+LQU604U7p27:6PpD3ul/yb9x/DwAPB94MkGpGLVQUhtW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

44a3aa44c95384cf016ef041f19b51f4a951709aab419484fa4ef80f61c1b1fc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 912KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 460KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 656KB - Virtual size: 654KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ