48477ede8ae8a6bdca613724b4fd338abf5064cc4c51c6e9263a2b520321791a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48477ede8ae8a6bdca613724b4fd338abf5064cc4c51c6e9263a2b520321791a
Size

731KB
MD5

7d6538e9ff9ff1c642cb775c7a111485
SHA1

58c3c9309567b6609bad873e198c46cf408fc96c
SHA256

48477ede8ae8a6bdca613724b4fd338abf5064cc4c51c6e9263a2b520321791a
SHA512

87c970fdb7d2b0969c49918991c64355f2356ff80f0035903ff1d6f06a0922355d8cc88f1b15e6d5d619c956ca74d018bacfae683426bce3df6566014271a19f
SSDEEP

12288:DyQJeSfnyf3XVTVpRa0t2h9TRIql/IukzL8CQQEmU2tpFgX0ClJ2ibfOUZyZPu/4:DyQJeSfiVrJ2VRMLo7//00zlMi7YdxCa

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

48477ede8ae8a6bdca613724b4fd338abf5064cc4c51c6e9263a2b520321791a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 709KB - Virtual size: 712KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ