73222104c374e81f48961521faf958174317e94bc8f9a2a28de12a5c0079ba38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73222104c374e81f48961521faf958174317e94bc8f9a2a28de12a5c0079ba38
Size

821KB
MD5

36504f082002f22a1ae1cac2987c6dd6
SHA1

e4d35ad49f959cd79e819b2fd3bcbf8aa2b8aaf8
SHA256

73222104c374e81f48961521faf958174317e94bc8f9a2a28de12a5c0079ba38
SHA512

597fa7ca8d70261f327febe8c7e38edc80e996fc03cbf06e82e25e52e6dda7c2c3f01e12bba1d4764d76bccc1f0a6d41e44199a42e552472151682c9cf04ab94
SSDEEP

12288:hJk0dcK+sPhFwZbP5Xe0VsmNC2yu1UdaZGAkpzr6x/r/w9i76Tq4l2aXEa4:htdcKLhIbNeuNC1vgsPtk8E/

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

73222104c374e81f48961521faf958174317e94bc8f9a2a28de12a5c0079ba38
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 828KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 778KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 860KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ