8da2a05e58b12d4d40cb95693d3e2af1d374fb7ba73ab14877eeddbb9e590325

General

Target

8da2a05e58b12d4d40cb95693d3e2af1d374fb7ba73ab14877eeddbb9e590325
Size

1.9MB
MD5

ae9e663d3495041ca39deef34faa2214
SHA1

3cea5c5fd4066d165d49b27844e78e2b0ab64b20
SHA256

8da2a05e58b12d4d40cb95693d3e2af1d374fb7ba73ab14877eeddbb9e590325
SHA512

6aaf7941e70b7cbf894da1001727d71c68d9b9b0ab71df03f9373fc98e8db912eebf2353551b49eec384a60a983bd788e4af4d6d883083ab811a42757182ea25
SSDEEP

24576:XfkWEFwuA1DLERp0XS4h+TuQgnrrUKJKpfHQM+fNZR39ptqHGMoK2zUm4dxXyICD:XzhDU6XyaJUKJ6/aLbMKLOxj6Wo

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

8da2a05e58b12d4d40cb95693d3e2af1d374fb7ba73ab14877eeddbb9e590325
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 6.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

sJk`Zn/p
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r)MskoCn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

;KyXST7u
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P'A>6lHq
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[!U!cAS8
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

onm%K5li
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eF/\'2p3
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p-cH\tP/
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+P`EVtV`
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 6.3MB

UPX1 Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 17KB - Virtual size: 20KB

Headers

File Characteristics

Sections

sJk`Zn/p Size: 1.1MB - Virtual size: 1.1MB

r)MskoCn Size: 4KB - Virtual size: 4KB

;KyXST7u Size: 33KB - Virtual size: 33KB

P'A>6lHq Size: - Virtual size: 24KB

[!U!cAS8 Size: 15KB - Virtual size: 14KB

onm%K5li Size: - Virtual size: 64B

eF/\'2p3 Size: 512B - Virtual size: 24B

p-cH\tP/ Size: 3.5MB - Virtual size: 3.5MB

+P`EVtV` Size: 3.3MB - Virtual size: 3.3MB

UPX0
Size: - Virtual size: 6.3MB

UPX1
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 17KB - Virtual size: 20KB

sJk`Zn/p
Size: 1.1MB - Virtual size: 1.1MB

r)MskoCn
Size: 4KB - Virtual size: 4KB

;KyXST7u
Size: 33KB - Virtual size: 33KB

P'A>6lHq
Size: - Virtual size: 24KB

[!U!cAS8
Size: 15KB - Virtual size: 14KB

onm%K5li
Size: - Virtual size: 64B

eF/\'2p3
Size: 512B - Virtual size: 24B

p-cH\tP/
Size: 3.5MB - Virtual size: 3.5MB

+P`EVtV`
Size: 3.3MB - Virtual size: 3.3MB