add475d0a3210542d20a0966f8ee01db833792599df6ffe94435823e3d55aa41 | Triage

Sharing

General

Target

add475d0a3210542d20a0966f8ee01db833792599df6ffe94435823e3d55aa41
Size

92KB
MD5

4bb851fcd94deecc70a831ec57b4e708
SHA1

b62f865b4af7168b10a74696d61ab9749f82be90
SHA256

add475d0a3210542d20a0966f8ee01db833792599df6ffe94435823e3d55aa41
SHA512

4c85df398621276413e88b4794c4f96dfe217aa64f523b9774dd25d86379762a35e20c684afac9472dbd17efa3b856e953b22ef1469d0bb9fbe2db06ea0ed110
SSDEEP

1536:r0IhYbpyMJXieBZRtwGouPpGUFu7wE0jVoCxbruU/8K4X:r0I0kMkcOkGwB7B/b4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

add475d0a3210542d20a0966f8ee01db833792599df6ffe94435823e3d55aa41
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ