4f4d42a0bd40dd538ea60ef06a94f1b9474c4dd9315a6d9622e405e9c48b29de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f4d42a0bd40dd538ea60ef06a94f1b9474c4dd9315a6d9622e405e9c48b29de
Size

978KB
MD5

07d3cfd7bf41b552fb6ce5e8389d404a
SHA1

6a43173632e5c2da1dfd4335bed9f74cb70f6916
SHA256

4f4d42a0bd40dd538ea60ef06a94f1b9474c4dd9315a6d9622e405e9c48b29de
SHA512

34ec116240c3453585c582af32503ad616d1ea4905461be2e5cb4afa035aea1ed8622c7bdc29f12e4212237d37baa738f650dd15f4fe14186ff6f3faf62219f9
SSDEEP

24576:r2Vvo1D+aoEniVlpcz1l1UVsSNUypr+WU:8vo1qaU61l1UVsgUyp3U

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4f4d42a0bd40dd538ea60ef06a94f1b9474c4dd9315a6d9622e405e9c48b29de
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 712KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 499KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 824KB - Virtual size: 822KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ