94a5ed2e70dabaff849f8a7a98a37cd6ca2f5967365a7b3b0c5daa6b1be75e68 | Triage

Sharing

General

Target

94a5ed2e70dabaff849f8a7a98a37cd6ca2f5967365a7b3b0c5daa6b1be75e68
Size

28KB
MD5

fa9d67a321099b3197ef25d8835aaa26
SHA1

0ae0267a6694481aa627139632d37ef3257b48b7
SHA256

94a5ed2e70dabaff849f8a7a98a37cd6ca2f5967365a7b3b0c5daa6b1be75e68
SHA512

d9085f26562a200eed5aa74756c95887d5291db5ff9cdc3993f19d1b554874312a659d72a1dd5167faef0e74992b732ae3d81147e2de7f779b9c13623a617fa6
SSDEEP

768:Pf0haonXrIaS8BC+zA/fpujc7paXmGV4I:fon0aJp0fpSHxVR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

94a5ed2e70dabaff849f8a7a98a37cd6ca2f5967365a7b3b0c5daa6b1be75e68
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ