a38c8a17fd5b5f2b67383790c3979a9ce73995050ac96875b6b50fefb2c143c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a38c8a17fd5b5f2b67383790c3979a9ce73995050ac96875b6b50fefb2c143c9
Size

2.2MB
MD5

eb0cd6f3d2289440d8883f8fedba396c
SHA1

b1760327c9bee703fdf7032a0f38e86d89838724
SHA256

a38c8a17fd5b5f2b67383790c3979a9ce73995050ac96875b6b50fefb2c143c9
SHA512

816537aa4126fde7026022d9945a79ee09b4e37d899a476c572b9b5e3cd266b7363e487bec5d6252a56406317e308153a11812811e384232a5aafa7ef58524da
SSDEEP

24576:oRncKoXS0W4spT3xjS4MGf6OqOnsWBjuotm8Ujo8ksrc/tS6C4dr0aB/M:oWKo2dxjnnRqOsWBjZm8woTsQy4d7/M

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a38c8a17fd5b5f2b67383790c3979a9ce73995050ac96875b6b50fefb2c143c9
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 504KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ