7f12b0e1a99d82f3c7e16548351852f26a9fde56bf30f54820a9f6e861156ae3 | Triage

Sharing

General

Target

7f12b0e1a99d82f3c7e16548351852f26a9fde56bf30f54820a9f6e861156ae3
Size

1.8MB
MD5

4de5364a720d085f9c64843ae04ba3c6
SHA1

03b4a64da71d7a854d19351d5abd8d2aac8a84b9
SHA256

7f12b0e1a99d82f3c7e16548351852f26a9fde56bf30f54820a9f6e861156ae3
SHA512

ce5dc8c12c8df0a92e05eeb882f2de0bcaef7c532860eef5e7c24487919c97f87f7ebae527d495c70fbe1f803e8e269f0a9a754528eb2d5d9616d094b09d7e18
SSDEEP

49152:A0miSMSSK/fVj4+/9+7KCRWvt4/Xub+kBC:AezKFj4QM7K+Wvt2w+k0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7f12b0e1a99d82f3c7e16548351852f26a9fde56bf30f54820a9f6e861156ae3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE