4a35874950dd8fef4ca66a090052c4e1a91871cfd43d744b410d068e48d9ddd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a35874950dd8fef4ca66a090052c4e1a91871cfd43d744b410d068e48d9ddd8
Size

351KB
MD5

5a34240f7e6e5ce88dc2b21f507c5430
SHA1

c298e46954a8cac558f10b95785ad4b6281d1480
SHA256

4a35874950dd8fef4ca66a090052c4e1a91871cfd43d744b410d068e48d9ddd8
SHA512

588aa83aefbee4026f25417aa0735b5b8ade00da2fb47b3f22807b063d9abad283f051e76f55d0517635e80e4f68738424f16cd2831a53d0814639f748a15789
SSDEEP

6144:D5BYNPVF+Em9XfQm9WVO1mA3hbBOP6wq+slxEG3EW5cVI9OmF8zVPMP6:NQVMam9WQ1mA3hbBAXslBEdI9ObPU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4a35874950dd8fef4ca66a090052c4e1a91871cfd43d744b410d068e48d9ddd8
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 350KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE