92f8c6244dcb3191df5531eca63ea858f3996ec440da39fe67123c9336bb61ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92f8c6244dcb3191df5531eca63ea858f3996ec440da39fe67123c9336bb61ff
Size

190KB
MD5

47c9c0b24572ed3d7abe7dae43304283
SHA1

e12fc69b06793f3a9b501132aad965757e781884
SHA256

92f8c6244dcb3191df5531eca63ea858f3996ec440da39fe67123c9336bb61ff
SHA512

280813a5153d61cd8777c6acecd3dfbc03297b31a45d9d24832ebdffd6acda0e02c8e13739ff2834b7eb0e1914f4b372ec7823d614de0df390f0e0bfb64859a4
SSDEEP

3072:t6CJN05VimDxH+Iby+d6FDKFQWx11GxTGfNnr+XACbYmWLZ:T0iEJgGFQEaTGfNnr+XACkXL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

92f8c6244dcb3191df5531eca63ea858f3996ec440da39fe67123c9336bb61ff
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ