9644f6dedab7ea704987b8b4a417fa9bf6535ac853001429233594c9da6a8eaf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9644f6dedab7ea704987b8b4a417fa9bf6535ac853001429233594c9da6a8eaf
Size

512KB
MD5

08c45b87fd88cbfe293a27a0f3d33fcd
SHA1

46139f560af6d5d3cdc27bbc1aa8dadad4febb9e
SHA256

9644f6dedab7ea704987b8b4a417fa9bf6535ac853001429233594c9da6a8eaf
SHA512

b03b31b5d6ebde08568f3527d12be12b9294310e3310c097b0e9eac69374152f90ec19c8bc9a1e40eda03bdfc8d6ecb574044dd73be52e2836cb355c9d0f1e46
SSDEEP

3072:Ddx3UBai+Y8D+lLuq/ObmeKA7n6jPZB5Buws:BxEBa3Y0qLkbmeKAz6nuw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9644f6dedab7ea704987b8b4a417fa9bf6535ac853001429233594c9da6a8eaf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 92KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ