a2074576c509081c0fa8c019432d46c6fb4ebe99f5e576c2ea2c4806bf511c3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2074576c509081c0fa8c019432d46c6fb4ebe99f5e576c2ea2c4806bf511c3c
Size

151KB
MD5

2d7573ac2280b5f747287472025b5538
SHA1

059bdaeeb0b49e76e7678d358affac13a8773a11
SHA256

a2074576c509081c0fa8c019432d46c6fb4ebe99f5e576c2ea2c4806bf511c3c
SHA512

78709e200d0a3a725df2d1ed6956a674c13d25cbe7b499a15a9b0702e93b5bf3013bbd1470620df8455dbf5f00299cde6386e3d85bb78e509150701328a77968
SSDEEP

3072:r52w0lpSSvbauhXMZBqhm/slTFmYmkVjHyn1WAY5s:r54lppDVh8ZBqhdlBJjgZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a2074576c509081c0fa8c019432d46c6fb4ebe99f5e576c2ea2c4806bf511c3c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ