a154ad9c8c18a0dcf12f72e32f8b5ba2324c4ac9c632fbf65a7566d85e59e696 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a154ad9c8c18a0dcf12f72e32f8b5ba2324c4ac9c632fbf65a7566d85e59e696
Size

48KB
MD5

7cbf96eae4458fee3f4eaec1b5d8159a
SHA1

035dfe2ef9accd98afea904f3ca53e0de7b508f6
SHA256

a154ad9c8c18a0dcf12f72e32f8b5ba2324c4ac9c632fbf65a7566d85e59e696
SHA512

b1338f103d01234616b14e47da5d69256aa2005eb63516cd402368e0297229eb9aa9942b9ad45d53306d04bec2cec707dbd142b07fec5bf465d09f61dca1f6f0
SSDEEP

1536:SNqaLV8a6Nz4sBZKbNXY5O83aIlT7DA0W:SNqMIzH2bS5O8vT700W

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a154ad9c8c18a0dcf12f72e32f8b5ba2324c4ac9c632fbf65a7566d85e59e696
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ