84100fb192a8f1c9e257cc439fed36278e23cca14c99cb85358a20a1a2c233ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84100fb192a8f1c9e257cc439fed36278e23cca14c99cb85358a20a1a2c233ab
Size

551KB
MD5

a993f42e345bee51c6d37b8ffc8c5825
SHA1

bc8eaf735eb5fa83e63c73be76cced59e3024bb8
SHA256

84100fb192a8f1c9e257cc439fed36278e23cca14c99cb85358a20a1a2c233ab
SHA512

3a6961a5fc94c51a4b5a4d43158aa4b0722dd37b1e57c69b5c1131834c68b7261a70bae9775b5a9a8f9958a11797b319a6e40ac6c791168e6f07e0c8ec226965
SSDEEP

12288:APNoS8AdL4KVZgmhmGER9bEn9lQOvNNdbJLZ8jwVi2Be/mQW7o:APNoNAdL4KvThAjaQOHdbJtOcim4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

84100fb192a8f1c9e257cc439fed36278e23cca14c99cb85358a20a1a2c233ab
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ