a290d756e3d27c0e84b07b316b228568b618a092aae6ff4abdf0f8a16e2db5b2 | Triage

Sharing

General

Target

a290d756e3d27c0e84b07b316b228568b618a092aae6ff4abdf0f8a16e2db5b2
Size

361KB
MD5

11237374706a36f4f556e6afa6feec71
SHA1

689f06cf6772a9bb6ea5eeb4764bf962f81a6080
SHA256

a290d756e3d27c0e84b07b316b228568b618a092aae6ff4abdf0f8a16e2db5b2
SHA512

3084502dcc04451ee51ed820318cbed89f96f3c5bb6abcbddb4bb6526f913e61b5fee1ed7636ad12d16e17ee41d954516e2c18859afac39789ff441debaa9886
SSDEEP

6144:EttBiR4jOsq9aEsiUscu5H2wXXDdGMzWdvV0ZkrrC7/Z8p4xpfgMS8GXelP:E04WoEsiUo5H2OXoMzwvV0GraGCp4Mu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

a290d756e3d27c0e84b07b316b228568b618a092aae6ff4abdf0f8a16e2db5b2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 324KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ