8ac4eaf7c7a29375c0774e95bca8972c1d682a1d45b67c3e4148d99ec436edb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ac4eaf7c7a29375c0774e95bca8972c1d682a1d45b67c3e4148d99ec436edb0
Size

61KB
MD5

b6fc17ca4e106688d6269af10aa1106e
SHA1

9b61448e08067e4acd10fbed8931b75f3e38499c
SHA256

8ac4eaf7c7a29375c0774e95bca8972c1d682a1d45b67c3e4148d99ec436edb0
SHA512

4d8767a16017be077445ec8ab6ffa58c5e981877840c54d2581ae623c36654d01d6c2326b98af2f8af204f344ed4894e276c6212cacd7c0c64a1653ec4aea1aa
SSDEEP

1536:XQ11LfWi6pHKhYv0xJJC8AmMMY1lX2xxB/NI:XC6PpKhYv0xJJC8HCriRI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8ac4eaf7c7a29375c0774e95bca8972c1d682a1d45b67c3e4148d99ec436edb0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ