a7fd8c966e9964e3701b131dfa3bcb00d4589187f8b3f53d88b7e8d15286cbc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7fd8c966e9964e3701b131dfa3bcb00d4589187f8b3f53d88b7e8d15286cbc1
Size

223KB
MD5

336249c864125ad8d759e8b1e46e04f0
SHA1

a8587382ae1b33174e23c32369be532415f9a038
SHA256

a7fd8c966e9964e3701b131dfa3bcb00d4589187f8b3f53d88b7e8d15286cbc1
SHA512

be8e4d0adadf3f7d88e7e85f7d3de4646d20e3c4c9505010f785e1ac79e59998b3ee817d9860a4e03c2fa86b0d9893021fa6deecaf6a6dd65b7012d7c7adeaaa
SSDEEP

3072:dk6mLmJ6+fhuMlKjPk4bwKy3HNpyZ4eD2h5cA5veEXPL+8Arx2Q7eRzTnsyig:dk/mJtfo8bB3H49ChiA5vrPK8MRGzTF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a7fd8c966e9964e3701b131dfa3bcb00d4589187f8b3f53d88b7e8d15286cbc1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ