883af4d5efaba73ac95ca86f84cf0a9a196f5a0194f3cf8125d197c110c2c1bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

883af4d5efaba73ac95ca86f84cf0a9a196f5a0194f3cf8125d197c110c2c1bd
Size

75KB
MD5

4e9d222a22b915a1b194538dc52dd08f
SHA1

59aa13973563a43b5625bf5191522fc85e923475
SHA256

883af4d5efaba73ac95ca86f84cf0a9a196f5a0194f3cf8125d197c110c2c1bd
SHA512

f9f4ad29b012e91e417f5e1cee6fcde89689510c338369a78a6f68678755ce78b56ced07fde5ceed9ec785950ec52278f441ee3050f9071d09ee2d3743922f79
SSDEEP

1536:ss/TnhiyfLukyrVB4xd01Pp+UEIlZ5QV66SLrm8RoImfbXgH:JTnh9Lukqm01PgEvGVOxohXg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

883af4d5efaba73ac95ca86f84cf0a9a196f5a0194f3cf8125d197c110c2c1bd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ