ae0828f59dfd84c4450a7842928906502f7614db85e286d84aad724455a517b7 | Triage

Sharing

General

Target

ae0828f59dfd84c4450a7842928906502f7614db85e286d84aad724455a517b7
Size

200KB
MD5

f6850ed4c5f190596b7a34dc556a5af4
SHA1

5542ab5136cc78962b2977c31f5d811ab6774e93
SHA256

ae0828f59dfd84c4450a7842928906502f7614db85e286d84aad724455a517b7
SHA512

04298a3e30b3e93c99d6e480caf8d4f63c21aced18d136fe5e091f28a560a39093e6189d0f7972208f2a8670ee5618df2acaedd6355d4f3d2a0a041bdafe7b6d
SSDEEP

3072:OYGoQzoTYd3bmcMDJ0XERNVYd3bmcMDJ0XERNJm3Dr1gxdojc:azoyblMtDbyblMtDjK1MGjc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ae0828f59dfd84c4450a7842928906502f7614db85e286d84aad724455a517b7
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

*
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE