89b44dbfa60149f5d0a9bce0e0648b64742ed5f88cde6e7791134d5137a5cd87

General

Target

89b44dbfa60149f5d0a9bce0e0648b64742ed5f88cde6e7791134d5137a5cd87
Size

1.7MB
MD5

298250ec89015b574d03d3bdd88b5f36
SHA1

cbd8c3862de6d1d6b32b180d92c62810adfb228b
SHA256

89b44dbfa60149f5d0a9bce0e0648b64742ed5f88cde6e7791134d5137a5cd87
SHA512

6f01a4fc7b43ec7866f0de946fb39581bf95c7eb66f27aa10d889937b65c8d42d4a67a3445dd642d9f6b8d50ec7b9fa65084af1d35338d6861fce30d48fe2057
SSDEEP

24576:XfkWEFwuA1DLERp0XS4h+TuQgnrrUKJKpfHQM+fNZR39ptqHGMoK2zUm4dxXyICS:XzhDU6XyaJUKJ6/aLbMKLOxj6g

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

89b44dbfa60149f5d0a9bce0e0648b64742ed5f88cde6e7791134d5137a5cd87
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 6.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

sJk`Zn/p
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

r)MskoCn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

;KyXST7u
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P'A>6lHq
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[!U!cAS8
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

onm%K5li
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eF/\'2p3
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

p-cH\tP/
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

+P`EVtV`
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 6.3MB

UPX1 Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 17KB - Virtual size: 20KB

Headers

File Characteristics

Sections

sJk`Zn/p Size: 1.1MB - Virtual size: 1.1MB

r)MskoCn Size: 4KB - Virtual size: 4KB

;KyXST7u Size: 33KB - Virtual size: 33KB

P'A>6lHq Size: - Virtual size: 24KB

[!U!cAS8 Size: 15KB - Virtual size: 14KB

onm%K5li Size: - Virtual size: 64B

eF/\'2p3 Size: 512B - Virtual size: 24B

p-cH\tP/ Size: 3.5MB - Virtual size: 3.5MB

+P`EVtV` Size: 3.3MB - Virtual size: 3.3MB

UPX0
Size: - Virtual size: 6.3MB

UPX1
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 17KB - Virtual size: 20KB

sJk`Zn/p
Size: 1.1MB - Virtual size: 1.1MB

r)MskoCn
Size: 4KB - Virtual size: 4KB

;KyXST7u
Size: 33KB - Virtual size: 33KB

P'A>6lHq
Size: - Virtual size: 24KB

[!U!cAS8
Size: 15KB - Virtual size: 14KB

onm%K5li
Size: - Virtual size: 64B

eF/\'2p3
Size: 512B - Virtual size: 24B

p-cH\tP/
Size: 3.5MB - Virtual size: 3.5MB

+P`EVtV`
Size: 3.3MB - Virtual size: 3.3MB