5a8fd2755c82ed6f8d4dc0ae95896583be762f223f3f3b0fe3b6e605501e31a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a8fd2755c82ed6f8d4dc0ae95896583be762f223f3f3b0fe3b6e605501e31a2
Size

35KB
MD5

358f3288014d8b7eba3c306ad57e4b3b
SHA1

1c16f9a55171115226273de2e55082851b393bc1
SHA256

5a8fd2755c82ed6f8d4dc0ae95896583be762f223f3f3b0fe3b6e605501e31a2
SHA512

e2bf3cb95c5437a2b9440392eba21722ef237db34ad03457f69dab51cfec4c5581ac882ceddc5c944dbeb8d38750701a866225f7334e8ffc5589c1bb4b2c6f88
SSDEEP

768:SCIqdH/k1ZVcT194jp4jJICogUtihzSVzral:SNqaLV8a6tIgUQ2fY

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

5a8fd2755c82ed6f8d4dc0ae95896583be762f223f3f3b0fe3b6e605501e31a2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ