237707a35757c9bbe8072b019269ba6c156c47b88c99fe0927f9bed2610d6833 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

237707a35757c9bbe8072b019269ba6c156c47b88c99fe0927f9bed2610d6833
Size

364KB
MD5

f4d8c37d03bf31062f269014ce09a387
SHA1

95c71a79a13db1642a65edbdac1cc7bae9c4bfbd
SHA256

237707a35757c9bbe8072b019269ba6c156c47b88c99fe0927f9bed2610d6833
SHA512

144e854cd4ba6108fd6a09a337f2747d4ea7f40a7c4950dd5f310f2b382686ccd20cc5ca89d3cf330d05335458bea61b02663dc950de2e9488ce7552bc77f6cd
SSDEEP

6144:7q10ZyZK/kAGZACxgj7vxxMOAkZ34hcpehmIfuIXcHLqLXoA59OSeXisBwN/OrlT:7xk0CGj7vxCOxIhJhlf5XcHGV59BeXNi

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

237707a35757c9bbe8072b019269ba6c156c47b88c99fe0927f9bed2610d6833
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 359KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 384KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ