a59c8074570ab48d203b89e0d3135e029875c5e1998602c1625f653f72543a88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59c8074570ab48d203b89e0d3135e029875c5e1998602c1625f653f72543a88
Size

291KB
MD5

13ddadd9b10bf6bb60fda81f2dc3369c
SHA1

c32a9a069705b0a4fdfcf47c6a1a771481a513a9
SHA256

a59c8074570ab48d203b89e0d3135e029875c5e1998602c1625f653f72543a88
SHA512

17f99639604feac4d8eb6d0f989c9e6348069798ca9babf1decdc4d47e90634c8843ce8b1665819cf01977644d2cf036d309d3c3e3f74420de8c74a1c6181a5c
SSDEEP

6144:4vg1UGXOfnEP3QYmdsboKpINUHiakFgAZAtHbKOCbRH7/H6:s6ROfCdsBKpRCakM7KNdb/H6

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a59c8074570ab48d203b89e0d3135e029875c5e1998602c1625f653f72543a88
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE