abf3c67a73525c0f92b169065d27cd08e02f5857014277965b56db95bc91eea1 | Triage

Sharing

General

Target

abf3c67a73525c0f92b169065d27cd08e02f5857014277965b56db95bc91eea1
Size

321KB
MD5

5b311106c984612b5774d18c1a76dbdd
SHA1

26e66ac6e657ed1db71eec3f75fec68a60dd56ed
SHA256

abf3c67a73525c0f92b169065d27cd08e02f5857014277965b56db95bc91eea1
SHA512

f5875548199e97ea00d121aa0e25679a5869c9c03a944be6708ac70f5fa6ee3932eae18994261367d8f1340863de0682f759809fc8f632f56ac37693b02c88f3
SSDEEP

6144:5uHOtwuHOaKl+lXDZJfLufs73dOk0XDpNjNOpys8r:gOtZOaKeZJys73dOvXDpNjNe8r

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

abf3c67a73525c0f92b169065d27cd08e02f5857014277965b56db95bc91eea1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ