dda8125d311b8c3cb9bf5bdd5782c1625b4bbcbb55c6261595fc1eb6119fa92c | Triage

Sharing

General

Target

dda8125d311b8c3cb9bf5bdd5782c1625b4bbcbb55c6261595fc1eb6119fa92c
Size

21KB
MD5

2cf70705f82bd80c54ee864032be588f
SHA1

cab2af33c84a4b663a352639d9eaa4f8acf6c813
SHA256

dda8125d311b8c3cb9bf5bdd5782c1625b4bbcbb55c6261595fc1eb6119fa92c
SHA512

618e2c00efc890a6844ada86877aeddf995c214e9c390fbadbcf4e1a50c1e1455ae970c1843fe7b755d447d3d4e6df1064f514c5f819442da0febdb4826fe402
SSDEEP

384:aZyCgsarzonsI4T3hdASlynpVov++m343fjKHf:fPVr8nto9ly4v++moLs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dda8125d311b8c3cb9bf5bdd5782c1625b4bbcbb55c6261595fc1eb6119fa92c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ