731fa8c1acc623a40845e9c28fcbe59c65acc267de9dd62593dbda9eb727165f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

731fa8c1acc623a40845e9c28fcbe59c65acc267de9dd62593dbda9eb727165f
Size

35KB
MD5

8ef814e7f0e9c5e41c6f821a273f21f7
SHA1

faef66be20d26b1b19e461c7618cc1333b5fd3ab
SHA256

731fa8c1acc623a40845e9c28fcbe59c65acc267de9dd62593dbda9eb727165f
SHA512

fa40fea8a0260e4e82baba3d6f740bcfafede88aace970727f6dc7426cd2d65de9455939977ed08e5d54dce473fdd3e02627826b56b56cc7fdc19bc0319afb11
SSDEEP

768:BlLLnRFlg8+LEVVbjgi6lz6DISVknvjO8AqSzjvs/d:PLvUsbjgi6l2wvZSzjvs/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

731fa8c1acc623a40845e9c28fcbe59c65acc267de9dd62593dbda9eb727165f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ