d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834 | Triage

Sharing

General

Target

d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834
Size

452KB
MD5

67719fd30faa2bc3768a2fedc073e868
SHA1

31d0b6f8e9ab1ef87033b60461201a263324de6b
SHA256

d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834
SHA512

7263e6230e827c41f3470bda1e05f028f6aec366a0e318fba381d10907921042e386ead8120488a597276e3ed5db6d0a4af3ff898a96978fcfaac0def7a95717
SSDEEP

6144:5uHOP/UOPSe570Szp3Znmy+g4IE2EOoAyqCPZIundXAnmy+g4H:gOEOB06aOoArCPZu2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d4999a0da4b0fa66872f79ce232957fc0ebed699a393fef75a3ae9fe6fde6834
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ