92bf4f424a1d4738e3f95e7739918972252b280310c38d0f556e69e454e7a11e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92bf4f424a1d4738e3f95e7739918972252b280310c38d0f556e69e454e7a11e
Size

108KB
MD5

a30e3082fe85ede9e4880de7f8f108df
SHA1

65f02bfdfb9a17eba11376ca3fe381f804fb027b
SHA256

92bf4f424a1d4738e3f95e7739918972252b280310c38d0f556e69e454e7a11e
SHA512

e92a97b4128f258e4a6b13b6011500014c22df76dc8979696d06fd7bc8e60ce66bfc8dce8870f6803a5491a353d35afc3a69de6c963242c9bf797082bf195758
SSDEEP

3072:tgSE+uiHj2QjI0LO+p74eEo6TCd6gob6kQX:dE+uGjtLB5h6Od6gobDQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
static1/unpack001/fpnnny.exe0	upx

Files

92bf4f424a1d4738e3f95e7739918972252b280310c38d0f556e69e454e7a11e
.lzh
fpnnny.exe0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ