b8a9f258b14876789b2f57f22f4c6d3c4f98c1a3b0a29f610f868c7708ac76e3 | Triage

Sharing

General

Target

b8a9f258b14876789b2f57f22f4c6d3c4f98c1a3b0a29f610f868c7708ac76e3
Size

12KB
MD5

51e69c77d72e1087e89198768e62c265
SHA1

93f81eff17fbd073bb54689426c1bb6bdeca5b57
SHA256

b8a9f258b14876789b2f57f22f4c6d3c4f98c1a3b0a29f610f868c7708ac76e3
SHA512

810cda7f33620c5e9009814ff6c7769b438d09bbc00e8cf24ee1c62d517fbd03062285d78ada29ccfefc8ebb0194c7b80eb0aa72d9ba3c4abb5b86dbf3985422
SSDEEP

192:In6t/W1oPk1fM5JP2nAin/Q9Kn1oe6dNCYGLVBYhujAyrgTR/8B7qCEc:jW68Mano9eoe6dNCYGLVyhXykQWW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b8a9f258b14876789b2f57f22f4c6d3c4f98c1a3b0a29f610f868c7708ac76e3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE