98c21a59db83a2331a8a6d387824192090f3b3b2ffe7872f66d4b38877053752 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98c21a59db83a2331a8a6d387824192090f3b3b2ffe7872f66d4b38877053752
Size

162KB
MD5

4bfde13f92fd86dbdc9cf657d7d4da3c
SHA1

051448d3a855b21f9b68db41749aec9617c1a77c
SHA256

98c21a59db83a2331a8a6d387824192090f3b3b2ffe7872f66d4b38877053752
SHA512

6674fd60142cf0e1bbcc01a7b000ade4aebcdd892a59a23c1c182d98bd549af248a6463e42b6adb829542a760af3033bc8351eb5b061da71be952b3b2389039b
SSDEEP

3072:gONiWAp1DDuWLw7qWfczQOjz0rwe4bJwWk2iBORSPocOfY8z8/aPQ7iotFdwkD8D:gOLAp1nLQfczQOQMeMKoRSxOf9ZPNotC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

98c21a59db83a2331a8a6d387824192090f3b3b2ffe7872f66d4b38877053752
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE