64a102ca47f23d3df61cbfc7630f261d58c48c02782c060765558ffda224731c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a102ca47f23d3df61cbfc7630f261d58c48c02782c060765558ffda224731c
Size

111KB
MD5

aad565a203d71fbbf3aad37c1ada10c8
SHA1

d7443a6eb808de989066b0a0216a67866122adbb
SHA256

64a102ca47f23d3df61cbfc7630f261d58c48c02782c060765558ffda224731c
SHA512

c54f9619fc6aec91f3bd8196d18d08252527d443ec48a04421f1f815c0036caef7fd9121eab1c08461a24f0ce632cb082e58ef4195b4c9bb2ba986ec3ce58ce4
SSDEEP

3072:TROzoTq0+RO7IwnYjF6xMwmrmVhW+YxFZNgGw:1kdNwByl6A+Ilgd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

64a102ca47f23d3df61cbfc7630f261d58c48c02782c060765558ffda224731c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE