97435989c5be0e37fc235f6c23daeeef06ae60ec1ab563f67e810dc68149eed1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97435989c5be0e37fc235f6c23daeeef06ae60ec1ab563f67e810dc68149eed1
Size

170KB
MD5

db29c546d6ee598805c7d5f9f6500344
SHA1

3652172170b9ca0d955c841ac6ec3a856df113af
SHA256

97435989c5be0e37fc235f6c23daeeef06ae60ec1ab563f67e810dc68149eed1
SHA512

7557f14e700de8ec9d4b56d4a37473a245a3dcdfeab52d54929142efaf15ef0674c044789562493cc42c014a60b495cd20afd5b5fdbd13d010e9f71f421df4a3
SSDEEP

3072:H6glIOLQsh3tqDzzHgeUWBzo4RJx4T9KKyWnNherZ3M/4KSM/DuJl4jrpe:7IeQWtkzxUD4RJx4TQIerZL+q4/p

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

97435989c5be0e37fc235f6c23daeeef06ae60ec1ab563f67e810dc68149eed1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ