98e6dc0402c6286afa3e6a0986eab70991819399d0fd82946a95cb12a0807bc9 | Triage

Sharing

General

Target

98e6dc0402c6286afa3e6a0986eab70991819399d0fd82946a95cb12a0807bc9
Size

49KB
MD5

8b520b027bd096638af14ffe2566ff3b
SHA1

17474a17d552be786b1c1d90ad0996163b46345f
SHA256

98e6dc0402c6286afa3e6a0986eab70991819399d0fd82946a95cb12a0807bc9
SHA512

4eef13e37615fd54fc8df98f833e35a6018d99bac79a97b8211402c03d0dfa7cb21419e1cb9dd8d5210bc3711f2c7735fcd97478a67013673e593e5e72cfa497
SSDEEP

768:bXOmfmt14CV83wPOKzM7t3P6m6u+4DasC4TCQuOK9zNnoAmkZBf3IDB:bqt14CVYwPOKzM7t9x+4DeUKFN/nfYV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

98e6dc0402c6286afa3e6a0986eab70991819399d0fd82946a95cb12a0807bc9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ