4edcd6fa91e3a24782e51a9be8ca92e54999355e2182101084804593f52a7b49 | Triage

Sharing

General

Target

4edcd6fa91e3a24782e51a9be8ca92e54999355e2182101084804593f52a7b49
Size

95KB
MD5

20bd16248cad07bc1db6f0dd7d3a9d99
SHA1

d1bbef441f244d2d12e0c98a5c5f630e3a435b07
SHA256

4edcd6fa91e3a24782e51a9be8ca92e54999355e2182101084804593f52a7b49
SHA512

2e1bc51b8d7851a21d95b4a4c53e7ed42c5d4831549408a2c66fc1fb4423ccc190a72540b55c34a84a5691bef44ef2a43c6bf8edb7191f22721872e75719bb71
SSDEEP

1536:32KRHhAZYeQ4fYv3M450m/A0JFuTdiMA1gSghOk1EfXEvb7cqY5k+KRRIBwJBAQp:3/eYeQYYvcZQFHxte1+0b3YGRumJBTGR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

4edcd6fa91e3a24782e51a9be8ca92e54999355e2182101084804593f52a7b49
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ