a8ac23cce63b3cf50d10b6cc2b818a286c444ae8453478e665f0afbf1b9c4d4e | Triage

Sharing

General

Target

a8ac23cce63b3cf50d10b6cc2b818a286c444ae8453478e665f0afbf1b9c4d4e
Size

514KB
MD5

30d090ca191b9caae8fc8c414fdc4dbe
SHA1

5fe87d0207eb332800093b22b284753101737285
SHA256

a8ac23cce63b3cf50d10b6cc2b818a286c444ae8453478e665f0afbf1b9c4d4e
SHA512

f5c05e638951a765f7085f5a08a7096b6f8ad64ec8e5e36905b68cba369c24b32b74ca6fa4f61b84545f8a42234adb7a5ad6cceefea42d2fada8bad666d61ce5
SSDEEP

12288:qFuEmlrhfRoQYCzPZi8q9HphjlZYEfGF:qFGrpTbZW9Hph5ZYy

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a8ac23cce63b3cf50d10b6cc2b818a286c444ae8453478e665f0afbf1b9c4d4e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 504KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 496KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 672KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ