99bd9026f48647e226c96b3a8a88ea895241e91dad5343213a5f4fd3e2e31d88 | Triage

Sharing

General

Target

99bd9026f48647e226c96b3a8a88ea895241e91dad5343213a5f4fd3e2e31d88
Size

2.0MB
MD5

3e5c3a64ca54c7f366735b44c02b8b41
SHA1

df7c02c777a355750596b602a62f6adcbaad06f4
SHA256

99bd9026f48647e226c96b3a8a88ea895241e91dad5343213a5f4fd3e2e31d88
SHA512

db12bf912182e9992f28f9f1b56460b3b4ee1b1b380d54b223cb9000258d7d8ce3ec67bee03391049f14c6d09b71dcbf2154500b42328ce2619471122b5b849e
SSDEEP

49152:agQ1vwmwy6YWzQoHy8+a5Bjlm3RZVYxStrVQhcOdTUMBEzKdipHRDyI2GwTGE:aTvwhYW28+a7B45YxStrVQhcOdTUfudp

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

99bd9026f48647e226c96b3a8a88ea895241e91dad5343213a5f4fd3e2e31d88
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ