854af3959571cb19298dd68a139e9a31bbf11377c1a77e846209027f1bd4f2af | Triage

Sharing

General

Target

854af3959571cb19298dd68a139e9a31bbf11377c1a77e846209027f1bd4f2af
Size

92KB
MD5

73412fe91da587dc042c41699de59d95
SHA1

4269fc3bfcceacbbf268ea30b5df5ae163aee841
SHA256

854af3959571cb19298dd68a139e9a31bbf11377c1a77e846209027f1bd4f2af
SHA512

76245e57895ee7e94e746876248c31ce1a694f06564d4cf76fcb78319d0799943a95693aed4f997fe4308223b904fa7180527557c394a723182f788efb164444
SSDEEP

1536:zFLLUphkO147XIYHYDGSNLCkx/l2jav22bUP1icO18834F1MbasTsKikBMVI:ZLUfkzzIY4SICY4PBO1883s9shiRVI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

854af3959571cb19298dd68a139e9a31bbf11377c1a77e846209027f1bd4f2af
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ