74939e71d997720f4134c16da3acff842fad2bf321ffeace4ce7138fcd4ef3fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74939e71d997720f4134c16da3acff842fad2bf321ffeace4ce7138fcd4ef3fc
Size

666KB
MD5

7bb8bc2a1398fa3645d007b2ac5c10e1
SHA1

0f85d7f4f6466b14a1fdb5a0dbe9edcbb5e42380
SHA256

74939e71d997720f4134c16da3acff842fad2bf321ffeace4ce7138fcd4ef3fc
SHA512

c5f4b4097367a1b84e3ef9613bd2ab326aed668d8d71cdb2aa1bcbfa4ea2b71d08840f662c6bee793dc9c8d107e236549a84c69db6345fb53cd95a7857911fcf
SSDEEP

12288:nsaY8rxAKNOOJn85v9Xnw0yT24i/RkK4wqDefKtPIeYWe2yARoU2N2kwH8gJ06Z:B/rxAKxUXnw0yC4ER+NqSt+P2y4BPZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

74939e71d997720f4134c16da3acff842fad2bf321ffeace4ce7138fcd4ef3fc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ