9d04bb409c5e4cb5f762e8a29f7b8f1eb0d40ccf84a53ab567927d9fded71690 | Triage

Sharing

General

Target

9d04bb409c5e4cb5f762e8a29f7b8f1eb0d40ccf84a53ab567927d9fded71690
Size

21KB
MD5

3540216eede4028e26d3c0763c6b86a0
SHA1

332ed0f29ac483592dfe133211742005114d3249
SHA256

9d04bb409c5e4cb5f762e8a29f7b8f1eb0d40ccf84a53ab567927d9fded71690
SHA512

99648b1b01532bc59d83fe08831ca98dcbdbfcc804e2354fd084059e09dd2be216bc52f26899cbb07de3a8729d61b6cd50ac295d66438db26106809ad1efb771
SSDEEP

384:BdEblyRygC3EneCVsTbH4x5x/xJsLhKgXMBuhFQss+9Xyyt:BdmNgC3THeVMKpBqFQA9b

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9d04bb409c5e4cb5f762e8a29f7b8f1eb0d40ccf84a53ab567927d9fded71690
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ