14084bbf18199adfb3d2e75d35c7eb5d9ebbbaf9298bb9ffd33e221418ef782a | Triage

Sharing

General

Target

14084bbf18199adfb3d2e75d35c7eb5d9ebbbaf9298bb9ffd33e221418ef782a
Size

3.4MB
MD5

9468dd826a4e275c3a61a3585c63a631
SHA1

ff83cf749334404cf64f73b9b309916d2eaead9d
SHA256

14084bbf18199adfb3d2e75d35c7eb5d9ebbbaf9298bb9ffd33e221418ef782a
SHA512

906866e0dca21e5a1ce040d143e2d407a1e326fe4a81506b6fd419b8d66ff909d35cd9218841c35ef18e81d8b1c97a828b7d9c0773af80a1a8ea5b91c701951d
SSDEEP

49152:o8DerQZbd2/8DerQZbd2/8DerQZbd2/8DerQZbd2/8DerQZbd2BwA:WrQZCrQZCrQZCrQZCrQZCf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

Files

14084bbf18199adfb3d2e75d35c7eb5d9ebbbaf9298bb9ffd33e221418ef782a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ