922876542251b722daa1ad6e5f3826a1dac641746033d7f46e15fccfe0b5227b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

922876542251b722daa1ad6e5f3826a1dac641746033d7f46e15fccfe0b5227b
Size

386KB
MD5

0c08dc10ad4587be780d1c624a0aa40e
SHA1

37d6e2339e7f0d1c14e6070a9f727483ead836c9
SHA256

922876542251b722daa1ad6e5f3826a1dac641746033d7f46e15fccfe0b5227b
SHA512

e6fc747dd77346492e9efefb565fcf2b5fd96f34a9d18f85290e4bd51c637e864a51d4f576f2377ffe8a685f02976224f7a70bcc458f0f8d86ad906fab15204f
SSDEEP

6144:QnSGQv5LRWAv91yFl2Eji934JOH2Z1Yqfaxx8t4VrSrmsLsXMAfl4JJf:QnSvfWM9CxjdN2VdSrmbB4

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

922876542251b722daa1ad6e5f3826a1dac641746033d7f46e15fccfe0b5227b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 508KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 360KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 504KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ