1a7a916565b0c07ffc6fff83f73738290d95cb137212e29de55718b62b6a40c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a7a916565b0c07ffc6fff83f73738290d95cb137212e29de55718b62b6a40c5
Size

391KB
MD5

e28a9b0b5cfdd8fb31db4eef54db95e1
SHA1

b3cedc1001b035f3aa0489a165690eafa08ca06e
SHA256

1a7a916565b0c07ffc6fff83f73738290d95cb137212e29de55718b62b6a40c5
SHA512

fdd454779d7f810c860d6bf15f45e5676bda694a1551f154b6837ffb9948ea3d0cab6609b044e553eefaefc7dfdae238964fc51d204a6c30daacb716e94a277a
SSDEEP

6144:Z5nJJ0VUX4x5vMP24XbteY/PbQ3A2WjLgjBjbDbUU3VF8uDe/A/:ZlNoPw24R3PcAFj05bDHn8uCI/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

1a7a916565b0c07ffc6fff83f73738290d95cb137212e29de55718b62b6a40c5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 372KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE