909c9e24f0848be897b8f2ff7f01cb83a423b4803a709105bec4832cd85f2848 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

909c9e24f0848be897b8f2ff7f01cb83a423b4803a709105bec4832cd85f2848
Size

17KB
MD5

c0a47225e7030279a26afd148c64c9d1
SHA1

cdb3ada8a37728dc3e682e3cd4312e3fbf0d5f9a
SHA256

909c9e24f0848be897b8f2ff7f01cb83a423b4803a709105bec4832cd85f2848
SHA512

a0f252d386ec95375dbaf9cb448e94c0ed6bdb0ec4d8c7ff9170b4f279d2858828ead4d4dff417b636baab7c3fd8475a245b3840fac8ab4169b255365de4b8bf
SSDEEP

384:djAagFHBUte1mCiEgD23uyLlxgC5++XfLlcSNN:18FHStvB23uyP/xSu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

909c9e24f0848be897b8f2ff7f01cb83a423b4803a709105bec4832cd85f2848
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ