40afeaea26929274eaeda936dad47995885cfc2e0c25ff341400e9699c8e4d1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40afeaea26929274eaeda936dad47995885cfc2e0c25ff341400e9699c8e4d1a
Size

41KB
MD5

67a31c748f5e2f3958629f29a7d73e70
SHA1

cf94f358e3920ccd0f5e2fb8181174843b5e96bd
SHA256

40afeaea26929274eaeda936dad47995885cfc2e0c25ff341400e9699c8e4d1a
SHA512

e088315c3af4e9ba3766b4ed8a290f478fb6eb6db6f908e7b9702e43cc260c53698aaa99d69bb73cb30f4cf8c4b197cd5c8a2b5396510ebc8996b2dbbddca07c
SSDEEP

768:+5iOtgFxf0RiIx+F2wbSipxMnPy2RHYJA4iYxM7n/a09v68e8caI4RKhOg:WgFxf0RiIx+F/deKJyYS/1e8caI1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

40afeaea26929274eaeda936dad47995885cfc2e0c25ff341400e9699c8e4d1a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ