74c28aaaafea449c073296c7c778bc90aacdc2490a6bd29cf018e8e7fc2bae1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74c28aaaafea449c073296c7c778bc90aacdc2490a6bd29cf018e8e7fc2bae1a
Size

5KB
MD5

38e7eb9ecbd56a9910fa0c3bf560ae7f
SHA1

06096bd19e73fed6e3e93ac541ef84f26662e126
SHA256

74c28aaaafea449c073296c7c778bc90aacdc2490a6bd29cf018e8e7fc2bae1a
SHA512

4b21fc27d62bd1e53e93cd8d5bf7c97b4975f41002e927140e2e90a0dd6134d66aa451eb9a270543e21054ebc98d7249642988e493909df96643c31760fa3ed7
SSDEEP

96:KP4DD57ckbaQgaY1/iji0SYSNw+TyVCLFHs0Vf601o:Kgvpckb3ga3bUGqNLFM0VS0i

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

74c28aaaafea449c073296c7c778bc90aacdc2490a6bd29cf018e8e7fc2bae1a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE