89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2

General

Target

89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2
Size

453KB
MD5

bc2e79fead905e39218c781d2e11a6bb
SHA1

52de61ea0c73b5e0e920b683145ff55155727691
SHA256

89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2
SHA512

09d3a11009017a4659bbdd5f6ff59858af3db38c6f11d7cada028c8e1abca4059ce3a70fd2c68b9b1f1b4a062d5c43fd9f969911f69d451dba54648c18487e21
SSDEEP

12288:B3GJDXgD6mX8o/LEsunbLSRYmrHIKs3eaEklo8MNgD:gXgDMoDEsuvSmmbRglHl

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

89fe86a30f97eaac6b29d35a43ad46c5162db148403f0c91c627dba95af174a2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 413KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.rdata
Size: 492KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 228KB

UPX1 Size: 413KB - Virtual size: 416KB

.rsrc Size: 39KB - Virtual size: 40KB

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 492KB - Virtual size: 575KB

.text Size: 16KB - Virtual size: 15KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 1024B - Virtual size: 22B

UPX0
Size: - Virtual size: 228KB

UPX1
Size: 413KB - Virtual size: 416KB

.rsrc
Size: 39KB - Virtual size: 40KB

.rdata
Size: 492KB - Virtual size: 575KB

.text
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 1024B - Virtual size: 22B