75030b9a16dff56d7ec2ab9c02d8c0dabca0fad92697adbfa9232d7b3e1749d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75030b9a16dff56d7ec2ab9c02d8c0dabca0fad92697adbfa9232d7b3e1749d2
Size

43KB
MD5

4bde95bab3372975154b41cf261d0b1c
SHA1

8efe8606283320dae2e4a81d6d8fc36d24fc49dd
SHA256

75030b9a16dff56d7ec2ab9c02d8c0dabca0fad92697adbfa9232d7b3e1749d2
SHA512

33be1ab4c69a43e69494a32e8b0c414c23a6163f9aa49a83c0c067bb15853773564223a757c98af521286de1437b0652eda7c8d830a9ca85b5dac457050aca07
SSDEEP

768:SCIqdH/k1ZVcT194jp4Doxu9cUF/2avD9bQQlSyysS3zfE1eLgz:SNqaLV8a6DoY7pvWsSyOfZLgz

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

75030b9a16dff56d7ec2ab9c02d8c0dabca0fad92697adbfa9232d7b3e1749d2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ