62d803cfc0b9f342e9d9e1f4e0939631b0b00f878d4662d7fd4c1c2973b9ac90 | Triage

Sharing

General

Target

62d803cfc0b9f342e9d9e1f4e0939631b0b00f878d4662d7fd4c1c2973b9ac90
Size

772KB
MD5

50890c8c7ae2b40d9c32020c5509eac2
SHA1

a247e9bf7bd03af2bc0d458d5fed94620f23024e
SHA256

62d803cfc0b9f342e9d9e1f4e0939631b0b00f878d4662d7fd4c1c2973b9ac90
SHA512

3f17a973dd9443115b9ffa5070182850e9aeae0a8b46b2edcc14b31ffde30d173ee480f126e57f8203a6477ca48d0adc2e8d653be0e9dce290d17f168dd1c7bd
SSDEEP

12288:pvxPFu1rRCT98dNP9b4AN7T7CUa1r/AGEPnVplBEf7ovHo9YtcKsY0RLetGfww6S:pvhFIrtdNVbzXaZ/upip9YaBzsn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

62d803cfc0b9f342e9d9e1f4e0939631b0b00f878d4662d7fd4c1c2973b9ac90
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 746KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 920KB - Virtual size: 916KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 495KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ