9ab9e5a9c9d4c88490abfa2ddd2791796083849e12f1a97883c250900045dca9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ab9e5a9c9d4c88490abfa2ddd2791796083849e12f1a97883c250900045dca9
Size

359KB
MD5

afd362af3fb08d86b42ef148968b7f10
SHA1

2297160c97df33d0ba4998e16ef30abd9f83b115
SHA256

9ab9e5a9c9d4c88490abfa2ddd2791796083849e12f1a97883c250900045dca9
SHA512

679030d477f6298f53993fa5230417febf9fc45cf161892ee3a0262e3095211962a9f6a104c30e6669f9574e40ca5b12f287cc82d43e5e9c45e0c29ddb41bd98
SSDEEP

6144:2Cd2Q+Pxdg2z1QNOkC7qUrBTvGnCjPKzm4n7b1i+1pkxreTxhntg0TJV9LZ:12QWga97Gng4n3B1axWDnL1VpZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9ab9e5a9c9d4c88490abfa2ddd2791796083849e12f1a97883c250900045dca9
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 355KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 322KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ