af9e0b0e3ca2e167023b8f94cd197d4588d02f95abcf8b77b6368ba6f5094b79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9e0b0e3ca2e167023b8f94cd197d4588d02f95abcf8b77b6368ba6f5094b79
Size

105KB
MD5

fc9ec4ba260cd60eae2733cf5a3dd238
SHA1

b4c049c3ba05dff46f6e7a6d429fe63f1d05f048
SHA256

af9e0b0e3ca2e167023b8f94cd197d4588d02f95abcf8b77b6368ba6f5094b79
SHA512

159ceb757f6c3c7a7cbffe7fbbf6c30dd0749ec028640dd814e9baa0a16fdd6705a3ea5cb1361a99348f66b863498b879b47d12ff9784fc26afd071ac1874e49
SSDEEP

1536:UjItF2i8Ntq2PRnD3fL+V7AOhM3vUfA2ZJX6+JvsC20dlUuu83OwxeiPiXSB:UjIX2i8Dq2PhfLoDhsD0Eh8eCe3XSB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

af9e0b0e3ca2e167023b8f94cd197d4588d02f95abcf8b77b6368ba6f5094b79
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ