f859089faa60e03cea2efde21e3495ca57be7cf2dffa512ee016e4e7a2ce0971 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f859089faa60e03cea2efde21e3495ca57be7cf2dffa512ee016e4e7a2ce0971
Size

19KB
MD5

83f8cb8e9c4b42af9733e088d9625cb3
SHA1

ae235a212f8e01ad2dd551c717fa48b300ad5933
SHA256

f859089faa60e03cea2efde21e3495ca57be7cf2dffa512ee016e4e7a2ce0971
SHA512

6988a9179309d29e2b3682eb9948a6249908087cd4c2772d20180a4d563aa4591f3e8655cc30f4ec0c053cbd19ae01554e082b6c2554e018ae0498adc7ca3baa
SSDEEP

384:QElMTwrvV6KaoO6Y2ZMBCwfUOuvRyW+xfs2LB9wpiylhcfWtORZWny:1GmvVPE2mBFfU7vR5+PLBy9hcb2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f859089faa60e03cea2efde21e3495ca57be7cf2dffa512ee016e4e7a2ce0971
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

AxMessageBox

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ