ad487e04f8bd8db0eb4e1bf51d34e616a132b3eb4231fd43cd0de14bc7d676c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad487e04f8bd8db0eb4e1bf51d34e616a132b3eb4231fd43cd0de14bc7d676c2
Size

116KB
MD5

4d115f9e15d9c28a8f9f7fc06af4613d
SHA1

8ebfbac4fc3b328e912ff0c84da530d532c8d9a8
SHA256

ad487e04f8bd8db0eb4e1bf51d34e616a132b3eb4231fd43cd0de14bc7d676c2
SHA512

8e8c62e08cb06cb304b83773be817a009d8adcdae62671f7e483336358fdff50ba47a3950c67ca204e73e6e5a83a56bce7b93566357e617fa14b4ea746ffad63
SSDEEP

3072:FaOkxpqmoMQK4IJjglBjx+8OJiMBX2UmT:FaOkrSl9XlBjx+wEU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ad487e04f8bd8db0eb4e1bf51d34e616a132b3eb4231fd43cd0de14bc7d676c2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 187KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ