a83cb0a8f9c2c1c241f662be25d433703a80828cdab0dfd908efd321dba69101 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a83cb0a8f9c2c1c241f662be25d433703a80828cdab0dfd908efd321dba69101
Size

169KB
MD5

7f888a3034ebd70625bafd941de6191e
SHA1

9709149a0444860274ac3cd2de76206abe04c3be
SHA256

a83cb0a8f9c2c1c241f662be25d433703a80828cdab0dfd908efd321dba69101
SHA512

cb14ae9796db0eff47077d698fb72b542375d1f86a6a4b4555d39929d0122f4870838ae886c7273650cbe027e2d11e44d025a81dc3a351d946b7cab11235b8ae
SSDEEP

3072:IwPbYd/35710sCwQ/J3QnvGQ1ot7V+cxY2:IwE/NCwQ/J36eQ1Tm

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a83cb0a8f9c2c1c241f662be25d433703a80828cdab0dfd908efd321dba69101
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 91KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bnvwqor
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE