795e7bece546c571af8f88502c6b9e9c51409ee13894ddc22f412e029572abcf | Triage

Sharing

General

Target

795e7bece546c571af8f88502c6b9e9c51409ee13894ddc22f412e029572abcf
Size

220KB
MD5

4a4c6491efaa9fa2c85ff026d5a4e237
SHA1

b7cb10be5ee99f61111b3aa5cb5f0f012185ba5e
SHA256

795e7bece546c571af8f88502c6b9e9c51409ee13894ddc22f412e029572abcf
SHA512

369b1028c5f5be10462546f6e43108512cd57f308fd291cf4495964a879513abdfb9ca065669bf8a500cdcc4d34ab3899c2dac38b235b430abd15c5cef9b8910
SSDEEP

6144:4v+HJWrcat0wPbQTG7UUFz4hVqnBC7sZH/s:4KJWrcnGUU14wBCw/s

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

795e7bece546c571af8f88502c6b9e9c51409ee13894ddc22f412e029572abcf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 216KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ