8416b4b0085c446a9ec1d480d03cae807a15a89fb9a2bb363a61db8e61cf7a92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8416b4b0085c446a9ec1d480d03cae807a15a89fb9a2bb363a61db8e61cf7a92
Size

716KB
MD5

dcf0a508fc60bcff8595415bd1f0c219
SHA1

de99e91ff0d6a04c188cee0e9f26dac16ba1fd10
SHA256

8416b4b0085c446a9ec1d480d03cae807a15a89fb9a2bb363a61db8e61cf7a92
SHA512

5fc19019526f9134f945db2ab659b2ed936428f83fa2e4b6ebce5745bc5f79f37882e83d10628e3704734506691577c66612ea44bed6660d6f1125e13751cd54
SSDEEP

12288:f2Pn6uN/0ej5jtw7SqOGvqEyuv/WWncBtFrth9XNYedbkb41PrAwzQM6wt++:ePPNsej5BweFJBU/WWnuthBLbLPrAwz1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8416b4b0085c446a9ec1d480d03cae807a15a89fb9a2bb363a61db8e61cf7a92
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ