a2fadb41d809164b76e38dcec4342f765b971084d9d4a53e61d228c7add03013 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2fadb41d809164b76e38dcec4342f765b971084d9d4a53e61d228c7add03013
Size

35KB
MD5

6b92985486d903993aef4fdb825e6e37
SHA1

3e881224097132d776f5d67f099b58d743988f92
SHA256

a2fadb41d809164b76e38dcec4342f765b971084d9d4a53e61d228c7add03013
SHA512

6a420f05440c50abcdea9f4d01a0f236355efb5401b6007c29b1132ad5eaa3abe247f452fbdce748d0c74860542fe84737d21b821b051e50f1fbe5fe14704d50
SSDEEP

768:bzhQSPcRy3SHPRf24VaArVhRKJw01S/XcUbG7ZIGwt2u4:blnPgy3624VaAtNAgPG2Gwt2P

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a2fadb41d809164b76e38dcec4342f765b971084d9d4a53e61d228c7add03013
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ