a4754fdf6dd0a2c42293a4b25436e8e2dc5de4a28589ff854a1a65851b9e9f3e | Triage

Sharing

General

Target

a4754fdf6dd0a2c42293a4b25436e8e2dc5de4a28589ff854a1a65851b9e9f3e
Size

130KB
MD5

29eac95c0246c697cd67ef8d72100700
SHA1

ae3c02db9b626191c1436d386f9c1af234769ae9
SHA256

a4754fdf6dd0a2c42293a4b25436e8e2dc5de4a28589ff854a1a65851b9e9f3e
SHA512

b5ba8e9af08f367bb72cef9d76cf23ab7a8e5884f2fab2b03062d72bbd79bdb45c206d07ed83d1e284793a7132d38106368626249155894ca691f20ec3f1c955
SSDEEP

3072:sq0jYYcoYHS11rsaJrUvWnxtvRJu/GYpogS/DDZGY8JcxKmnhh/tZbsOEQa:X0WFHS1hp4WnPTuO4nS/3kbJUhhdoN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a4754fdf6dd0a2c42293a4b25436e8e2dc5de4a28589ff854a1a65851b9e9f3e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ