86e30a69593e9696e1b3fcfc14e576de4d42dce7d3e264e2370e88fe7e469120 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86e30a69593e9696e1b3fcfc14e576de4d42dce7d3e264e2370e88fe7e469120
Size

28KB
MD5

a835c1413752d8c4e156fa99fc875068
SHA1

2c5611b15f0da572aecb2a2a7ab58a8f0a736527
SHA256

86e30a69593e9696e1b3fcfc14e576de4d42dce7d3e264e2370e88fe7e469120
SHA512

2c5f4d2e687bd5e4ddd61024345b2d4bf497263f812eec4fd3373075068bf8bde9f958bd80faa6d8280e803d6ec59f4c21fbf0a2921c35c57eb52871458467d9
SSDEEP

768:sbrZqx3QegWBC+zCS4Z6eHR9nYtt+nTV:sbrZCAegWpCJ4eHHnCQnJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

86e30a69593e9696e1b3fcfc14e576de4d42dce7d3e264e2370e88fe7e469120
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ