a407ce88190dd9eee187933257ae1b417db531f3eb92b9033f1f0a7e0e5dba83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a407ce88190dd9eee187933257ae1b417db531f3eb92b9033f1f0a7e0e5dba83
Size

923KB
MD5

f73a21cf2bc2512c9566066721695a67
SHA1

5248b455db0416adac7433b3a9043ea327906079
SHA256

a407ce88190dd9eee187933257ae1b417db531f3eb92b9033f1f0a7e0e5dba83
SHA512

4abad0728eeaaae3068b75e1db089e4df252230f2507a46b7192bb654d7c506cea1d9ff823f696e5e3169b6de7c1de1819cc740ab24e3bccfc19d82a1036197a
SSDEEP

12288:d8zA2Mz4nSe10Q/W5mwVUoeOC4qoep5F0oWg+XMO25y+RAtcdmwgLU2:dgA2Q4nLNwVUoeO1+pj0opx7RRlgwgU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a407ce88190dd9eee187933257ae1b417db531f3eb92b9033f1f0a7e0e5dba83
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 496KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 497KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 852KB - Virtual size: 849KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ