8f7f60ed27d6fcc3e02a29225790a350830cd5ffa3153a27b91ae6f76b8808e0 | Triage

Sharing

General

Target

8f7f60ed27d6fcc3e02a29225790a350830cd5ffa3153a27b91ae6f76b8808e0
Size

4KB
MD5

b9fb8bfe11a56cfd2d9c2d351b0231a2
SHA1

0b23d5ecd4672beaf4c9fa3b25c4e329dfdb61a1
SHA256

8f7f60ed27d6fcc3e02a29225790a350830cd5ffa3153a27b91ae6f76b8808e0
SHA512

4c695c34596c5d7ea299ac2927c124d9b585deb2a9d809f550b8e21866fe702fc29717e0ba411e2ede0ff66caa2d2ee4282ebff7d18fb10887bd591404365a70
SSDEEP

48:6u4+hmf9g24sZntAGi0eycyF0+VdtEcO6I7cyRKZdSeJY8JTaUBKlJogjjYr0x6V:H4+kf+UtAGg1+VdtvJyeQlFjsr0x6VX3

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8f7f60ed27d6fcc3e02a29225790a350830cd5ffa3153a27b91ae6f76b8808e0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 576B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE