dac38640b7d5873313406c436ea92722c1aac8e2c71bc9a627330613483e01c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dac38640b7d5873313406c436ea92722c1aac8e2c71bc9a627330613483e01c6
Size

164KB
MD5

4025603511535f1a7c8d61447cb65e2a
SHA1

c173e589cba654c2eb4bbc36bf49e999ac7eb92f
SHA256

dac38640b7d5873313406c436ea92722c1aac8e2c71bc9a627330613483e01c6
SHA512

aa6c9f036f6a4a4dd7c840101531f9a7b71503169601b9a401f2099ac2338ec08c31ea1df58a55fdf0403fef16f0e5c2ff74693d1ad9528a2b625fa12e1cec4c
SSDEEP

3072:0W51IdlH5c8qRl0rFJttja1oEmRjkC1M18rcZo7sQluJSqo5:0WDulH57q0rTaQja18t74Sqo5

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dac38640b7d5873313406c436ea92722c1aac8e2c71bc9a627330613483e01c6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ