f91a2d504d9d38f91087c186cec15428b59d865bbb8a833ce7a36bc9b44f0f42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f91a2d504d9d38f91087c186cec15428b59d865bbb8a833ce7a36bc9b44f0f42
Size

59KB
MD5

a1a6ec848f9efbf5057049e94546cb21
SHA1

fa7db6aef1c3ab051ffd51ac1d037ec5364e1baa
SHA256

f91a2d504d9d38f91087c186cec15428b59d865bbb8a833ce7a36bc9b44f0f42
SHA512

fcb8d74c46e545641d831aa6541ad30fb55a5e2a4d670cf645e8e15594f484b728551d981052833850215df84a2be539beb0a2e5b73a2144f13df91bf5ff0735
SSDEEP

768:RfqMHCMEjKMV4upt86DT7gRHBFFAGmTRtJcP1kbhrto9pK4mtvYyMFXxTN5UAcwg:nlEjDV9p3FY1+tto8tpk5ww0my

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f91a2d504d9d38f91087c186cec15428b59d865bbb8a833ce7a36bc9b44f0f42
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ