a520d40b7cfb46d42fe80a572baec65de212aa3a632dbdd2a120ef347156c504 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a520d40b7cfb46d42fe80a572baec65de212aa3a632dbdd2a120ef347156c504
Size

98KB
MD5

55a1d8779a0d9bce7539a6415422d371
SHA1

a6bafe564178bfaa33fea37b0395fdc9b5120694
SHA256

a520d40b7cfb46d42fe80a572baec65de212aa3a632dbdd2a120ef347156c504
SHA512

3b93c4bbaed02301e3b172312464c023a247c44543bd5f8e09f9c6ec9267b9a7527032e966dc0e4d34e4104407386e2a1ace1aef3a1ad7b10fb24a7c64bc7210
SSDEEP

1536:1Fcnj3N5zEIj+HaJwpLDX8JdovjpWJ41u71s42T88YJE9rN2Q:1FIn5wpHsJdCjwrsE8YJE9kQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a520d40b7cfb46d42fe80a572baec65de212aa3a632dbdd2a120ef347156c504
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ