98396f344765e1d5f52880190952748fcd4f13f15205fe649be501f5307080be | Triage

Sharing

General

Target

98396f344765e1d5f52880190952748fcd4f13f15205fe649be501f5307080be
Size

22KB
MD5

7f232a81585a7e941351441a89b22d39
SHA1

fab86df27b18347a98cf2da73d3a6be3a25ea368
SHA256

98396f344765e1d5f52880190952748fcd4f13f15205fe649be501f5307080be
SHA512

ff19d7cb1c95e575f9c7f7557ae90e1b8ace47e20e9fd8cf1e80daf1196bb9259b42f3d1125b476c71b4a9337534a664850605b81fb18d930159bd0b1054cbab
SSDEEP

384:EJhgMtdkBv5oRgtRULDlL0vR87DVMlJeF935b5v1LvAJ0UYIIIubg0JEM:ahgKI6gtRaRLsMDVMPwHbt1LHU3kbg/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

98396f344765e1d5f52880190952748fcd4f13f15205fe649be501f5307080be
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ