14437f4901b26cfb7241775545f9bfecc89b22518c5ba5341fad3c4612ecdd82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14437f4901b26cfb7241775545f9bfecc89b22518c5ba5341fad3c4612ecdd82
Size

14KB
MD5

1dbf61ed0213b787f79bbd067470d8f0
SHA1

381c4cc31c4a44374db1e87d5cb0d0ce4e14bb42
SHA256

14437f4901b26cfb7241775545f9bfecc89b22518c5ba5341fad3c4612ecdd82
SHA512

7f52995740900e0818560005e7c47fcac81d5dd1c28be2fbd5cf92fcfca54903b8252f135484317c61fa0565ff826f871dde32509300e6f4e20efc343a85f839
SSDEEP

192:WujOFS+e3RXxHQQsI4B1Fqky4ihFAndKYaC9zxVQFvptIaFXXuHl0oW:WujAS+qhrUrxTaCp7QFBtX

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

14437f4901b26cfb7241775545f9bfecc89b22518c5ba5341fad3c4612ecdd82
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE