a307e56154056f5553dae9f28b79fb5e3bcdbbbc62e1fc96ad9d44b9a6e649e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a307e56154056f5553dae9f28b79fb5e3bcdbbbc62e1fc96ad9d44b9a6e649e3
Size

60KB
MD5

15be17e286bbcf8cc921e4801f26b783
SHA1

0a26caaf054d9a5ef807d4ebcb7bfe00e6d11110
SHA256

a307e56154056f5553dae9f28b79fb5e3bcdbbbc62e1fc96ad9d44b9a6e649e3
SHA512

d76772b223955727988f65b0e6cba03a281dfbff26add170011d816cddde7f1720994a7bd04c399e5d511daf99cd438fa46d06418f1d85f9d6b240c02fb35fee
SSDEEP

1536:gWgMXFhn8j3snPAuYTBJuWU+NIcBUpJx1qb3+P:gWLhScn4umBIWtBBT3o

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a307e56154056f5553dae9f28b79fb5e3bcdbbbc62e1fc96ad9d44b9a6e649e3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ