ad395cce08f91c0f94b10fe6e39341fd483c354a4a91d1167df795e9fe0043f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad395cce08f91c0f94b10fe6e39341fd483c354a4a91d1167df795e9fe0043f1
Size

298KB
MD5

7cf2573aaaa048a12e38ad273f60cb73
SHA1

82647d1f8442b660e9a05ccb638e459fbc2a37f0
SHA256

ad395cce08f91c0f94b10fe6e39341fd483c354a4a91d1167df795e9fe0043f1
SHA512

9c0604a1f4e3daab9c9125a0d7b25fc0d928880fc7ac4ce4a1bc66e3464f9b98838c1209f54ed35c078140d222eb5ee41fdec55da1549daf7d66de08e56fdffa
SSDEEP

6144:S5a/TkuTiFSRqfxftDJeqCxsq1MIE0IYxFWxCVOwvEcSpuMvU7:UaI3UqpftDQGLIh/EEVOOi8J

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ad395cce08f91c0f94b10fe6e39341fd483c354a4a91d1167df795e9fe0043f1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ