44821ea8ee672e7c5f3d00027c8aee4df0d0d8fb16e1b36a4259f1a476f5640f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44821ea8ee672e7c5f3d00027c8aee4df0d0d8fb16e1b36a4259f1a476f5640f
Size

274KB
MD5

334ac32865a60dafebfde7479716c21f
SHA1

feedf15486ba4a046bdabb8c62f58be3ae4f329c
SHA256

44821ea8ee672e7c5f3d00027c8aee4df0d0d8fb16e1b36a4259f1a476f5640f
SHA512

5e85eae35f87a7ca48cc69dd787134f6a0e44b41cc610e38ccdac5a9403923b2dcc7713255e57125c2a12be22d51df03a540eff4a244f4782b42a06afb0a5a6d
SSDEEP

6144:nsaY8p9z9ViyVDRU6AfyPM4IGZXCdZcY/lAu:nsaY8rOyfF/4GZXuNV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

44821ea8ee672e7c5f3d00027c8aee4df0d0d8fb16e1b36a4259f1a476f5640f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ