8a1f404bd23fd11f30d91f6c5f54279facb43061dfaf93f9613d32f6f051123b[.]exe | Triage

Sharing

General

Target

8a1f404bd23fd11f30d91f6c5f54279facb43061dfaf93f9613d32f6f051123b.exe
Size

340KB
MD5

42c4cdc463a2da1efc9e7bd9bcef624e
SHA1

28ba525360f2bcdd0efb8bcc265407b2fb868684
SHA256

8a1f404bd23fd11f30d91f6c5f54279facb43061dfaf93f9613d32f6f051123b
SHA512

61330e574aa753712f1537aa2e033d04040c5c0fe06b84c55b4ebea5716a6e070eb90ba475489d1c3eb81436a5959837f85a0a89401cee55c55b3ae3958db2bf
SSDEEP

6144:Q1UkRIY0Z5N9j+lEnsIJ/HEFJxGdZgoMHQaHypeeYlvAYb9FbiA:Q1UkRIV5N9E4HeMLMwoqyvAYJFmA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8a1f404bd23fd11f30d91f6c5f54279facb43061dfaf93f9613d32f6f051123b.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 276KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE