a999a18cef9bc0a9b33d3a017adc3f2eb39e2ee4d2065645120307f2d4d385b7

General

Target

a999a18cef9bc0a9b33d3a017adc3f2eb39e2ee4d2065645120307f2d4d385b7
Size

897KB
MD5

96cbf794fbc6ec32421de48559992b63
SHA1

27ffdf8eda88ae2814f83561324896f4a5ab2261
SHA256

a999a18cef9bc0a9b33d3a017adc3f2eb39e2ee4d2065645120307f2d4d385b7
SHA512

487a263a95dd46bff05206a2b35f06ebfd422b9c616ba60dae8935bf1832e8e5327307bbc46257d7627fa38d1eed367985e54561860dc941a177cfb30a5e2831
SSDEEP

24576:ffdKVlhgW8pFZh0koHM4Owud+Obuupz4O/9XQx:fl6aWtkos4odNbHpz4i9X

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

a999a18cef9bc0a9b33d3a017adc3f2eb39e2ee4d2065645120307f2d4d385b7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 870KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 34KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 3.0MB

UPX1 Size: 870KB - Virtual size: 872KB

.rsrc Size: 25KB - Virtual size: 28KB

Headers

File Characteristics

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.itext Size: 20KB - Virtual size: 20KB

.data Size: 59KB - Virtual size: 58KB

.bss Size: - Virtual size: 34KB

.idata Size: 14KB - Virtual size: 14KB

.tls Size: - Virtual size: 64B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 129KB - Virtual size: 128KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

UPX0
Size: - Virtual size: 3.0MB

UPX1
Size: 870KB - Virtual size: 872KB

.rsrc
Size: 25KB - Virtual size: 28KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.itext
Size: 20KB - Virtual size: 20KB

.data
Size: 59KB - Virtual size: 58KB

.bss
Size: - Virtual size: 34KB

.idata
Size: 14KB - Virtual size: 14KB

.tls
Size: - Virtual size: 64B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 129KB - Virtual size: 128KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB