d84d5ee95edcb4eaee8e49617951eb55b7b03114691d6fa3971e874ddc291b36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d84d5ee95edcb4eaee8e49617951eb55b7b03114691d6fa3971e874ddc291b36
Size

86KB
MD5

cb4fcc490f579a1b1a3e749f3a7caa75
SHA1

191c70c3dfefad246be0e25f92e0cd085dd1390e
SHA256

d84d5ee95edcb4eaee8e49617951eb55b7b03114691d6fa3971e874ddc291b36
SHA512

92940d30a082f0204e329660dbad94ee82f7e0829810aba89a12dbe42f982ebeca9507cb7f3e4a0b091a23b24efd3cc37755dcf3386dc8325860d9ccc12e6795
SSDEEP

1536:JLVpfMxgbnxvB4z4AVj+0SGDM/ZkNDz2J3ghMSaW1AFL+g5u6CTZ9T27H:npfMxsnxvU4AYvl6nk2skA5+g5u1bS7H

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d84d5ee95edcb4eaee8e49617951eb55b7b03114691d6fa3971e874ddc291b36
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ