a8948926cad1febad0402bc0bf431eed60c46a843469d6be24ef37726a83cf3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8948926cad1febad0402bc0bf431eed60c46a843469d6be24ef37726a83cf3e
Size

74KB
MD5

b0b8c8b4c41bf1cb2f6d1b875d0442e2
SHA1

5b3071c9d906f8c4cd51f0339c79475cf1b8fad3
SHA256

a8948926cad1febad0402bc0bf431eed60c46a843469d6be24ef37726a83cf3e
SHA512

335e8bb3648b8d8009e74e49a0fe569dfedba57035abab05352141aeb7bbb8f2e3fafd5616b20e17a3f8dfb9be86e55a8ed1f2a138c7191e2cfe7daccd36d368
SSDEEP

1536:57vJxM46JXbgbg6eNjR0xXtYTQAKGVpOTycvQbXb3nOB55:Babgrk4XtYTQPGHlc4bXb3nW5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a8948926cad1febad0402bc0bf431eed60c46a843469d6be24ef37726a83cf3e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ