aa624e69b4826402f90cbfcf16749ace60c6e1390f9d949fed23ea1e618f9639 | Triage

Sharing

General

Target

aa624e69b4826402f90cbfcf16749ace60c6e1390f9d949fed23ea1e618f9639
Size

45KB
MD5

16a805bf6c53ad40626cf2240843484a
SHA1

095b6a391c3bb4411d055335290a8eb0c8f99d1e
SHA256

aa624e69b4826402f90cbfcf16749ace60c6e1390f9d949fed23ea1e618f9639
SHA512

11e8beb9ccc3f16013625fc14096848d3db50e46913f63e6b11cbd18fd37ef8b60d7201d5f29b9882107acf39135fa9b04b374aaf19ccc2b6a19540c1308d671
SSDEEP

768:AqEnvMI+Xa0ksrrZuY4mEqydRZDMcXRr2KPu0/S5DYM5j/63U0nnv:AqqE+eNh4LldjXRSKPnaNvj9M

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

aa624e69b4826402f90cbfcf16749ace60c6e1390f9d949fed23ea1e618f9639
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ