afebe14a14b3051ddfaa71efff9eff0fb2d05ff837a3f69fe9cf4e03f0adb292 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afebe14a14b3051ddfaa71efff9eff0fb2d05ff837a3f69fe9cf4e03f0adb292
Size

392KB
MD5

5dbf466f0488a6dcca3b7946c6d325c6
SHA1

94a214ce1a23f3e7d9a25f617987285bbd780e4b
SHA256

afebe14a14b3051ddfaa71efff9eff0fb2d05ff837a3f69fe9cf4e03f0adb292
SHA512

0be60317db5261552af8f43a9192eda4c1f602377a3bca0392e7d64cd4a58e4f8df2fb7d9763bc8786a7e084aa22da5f6f80ceee6ff114deeae12f63e4831d95
SSDEEP

3072:D1tn5ymi8Eu11uZaLJbN2SQ3N7Do0JgT5SVtoaKGlD8yWC242UcdRCU4J4lg4E4O:1kioSIqb1rrcdpsyD80BPYl8QEihCH

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

afebe14a14b3051ddfaa71efff9eff0fb2d05ff837a3f69fe9cf4e03f0adb292
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM

Sections

UPX0
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ultra
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ