ab5776aa83678e9a3315ca93d6debb8380dc86c15cd1279d62fd7cb30b3f8b12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab5776aa83678e9a3315ca93d6debb8380dc86c15cd1279d62fd7cb30b3f8b12
Size

1.1MB
MD5

d905df16e1c3f0bbc08865579af4dea2
SHA1

c1da2c7b74e0548b144772a2882085425784179e
SHA256

ab5776aa83678e9a3315ca93d6debb8380dc86c15cd1279d62fd7cb30b3f8b12
SHA512

5f75c64a10b009b83c5f8da0cd62abd9d1b579c24ded616d045deb37f5da927de778fb8f0493170d44acd203f56f078dca889dfbb8802b2e38f70628d21d939e
SSDEEP

24576:88PmvAYvrxQW/ZYcLNx3Ni5k295rp703Si5e:8j/ZpN/iZDrkro

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ab5776aa83678e9a3315ca93d6debb8380dc86c15cd1279d62fd7cb30b3f8b12
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ