42c8130a6b30d539cef27347f324c7722a36d096956a1c05a49eb8588860cd86 | Triage

Sharing

General

Target

42c8130a6b30d539cef27347f324c7722a36d096956a1c05a49eb8588860cd86
Size

581KB
MD5

32f17557fccf705069ffb76cded74107
SHA1

d3bfc6b076105d9232216c7b3653b2981ae8ed05
SHA256

42c8130a6b30d539cef27347f324c7722a36d096956a1c05a49eb8588860cd86
SHA512

6f3a7ae15bfdf92da96a5ca47b9685c7e5dcaeed743fbba9c0e4a9ea829d2b959d945f551e71c963e21acba2dfc632a4e4dc23a90258bb0289126034d66b9b65
SSDEEP

12288:XEijOrAxZXNxwDjlENkiTNY/wS1Va9NzWny4Cy/mo05Jj+:XrxbxwDJ5iTNYJ1VWulCy/90L+

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

42c8130a6b30d539cef27347f324c7722a36d096956a1c05a49eb8588860cd86
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 579KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ