94772565b21e81d0e1ecfcfcb72ea22568255150638965f266ff1c26928aa308 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94772565b21e81d0e1ecfcfcb72ea22568255150638965f266ff1c26928aa308
Size

103KB
MD5

9ec28ab30ec35033dd81c8bb1e393652
SHA1

e47d45ea43363561da5f3ee3a35627495424e9ec
SHA256

94772565b21e81d0e1ecfcfcb72ea22568255150638965f266ff1c26928aa308
SHA512

fa70d3876ddb40e3ba7fc97a4a488dcaea72d0577e8e090f6db43d23b9b9c0ea8efc7a51b3620267b9847aa1682453ca78689d59d3bcbad56cb9d143ec74d4ef
SSDEEP

1536:ZrNn9OchWKF7dpcv/LxLcJ7p7XV7nj63SfZC6VHztp1RDYibCsqkSZZZ3i:ZLhbF7zoBE7dnjVf7VHRp1RDVbTUi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

94772565b21e81d0e1ecfcfcb72ea22568255150638965f266ff1c26928aa308
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 324KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ