8c92436dd77d13f48ce952de7ab72e856d3e26ca59588bdfb956c9c8205da03e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c92436dd77d13f48ce952de7ab72e856d3e26ca59588bdfb956c9c8205da03e
Size

10KB
MD5

59084d3f08f3c785c0a1b7e602c494f1
SHA1

f309ed194ad6e3b0a4af7fa72bd67a906dbf555f
SHA256

8c92436dd77d13f48ce952de7ab72e856d3e26ca59588bdfb956c9c8205da03e
SHA512

a2c89a3c5309bb199bf914ea4c267616a1aad40fa0a1c374de3890d1f68a1a9d819c0ac4defc7fd2272ceb5b6102ed52ffe8f71214161d35297cf6aa30189bb9
SSDEEP

192:ZAYhK754QC80smI9s6N7rZhLP2bdoU/OEnEKqQOVqnlx/gzXZw7pyr:ZAYhy5UZsmIaqrWbdo0OEESvnlYZcpyr

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8c92436dd77d13f48ce952de7ab72e856d3e26ca59588bdfb956c9c8205da03e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ