91344e3ce5e2884f2a39e4ac6c20e1c61d53f0bdd4be45ca625aec465c957136 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91344e3ce5e2884f2a39e4ac6c20e1c61d53f0bdd4be45ca625aec465c957136
Size

4.2MB
MD5

7e813485e7b541b091e87ee0b40c9973
SHA1

e04aded0851f779f4ed8045ada31c361d7de2f9e
SHA256

91344e3ce5e2884f2a39e4ac6c20e1c61d53f0bdd4be45ca625aec465c957136
SHA512

ce992533517fd296ae26d864c15e50449275e5720109c895e91e9974760c885d6bea291df4775c01fe67a49fe2f38e10aa2ac2d914b648af97b54f86ec37b3f1
SSDEEP

49152:xerQZbd2EerQZbd2EerQZbd2EerQZbd2EerQZbd2EerQZbd2xN:4rQZmrQZmrQZmrQZmrQZmrQZk

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

91344e3ce5e2884f2a39e4ac6c20e1c61d53f0bdd4be45ca625aec465c957136
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ