a1c45b6d6e29297ccf98bba182fd2b87df6e7921cfc73484314085768beb5092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1c45b6d6e29297ccf98bba182fd2b87df6e7921cfc73484314085768beb5092
Size

23KB
MD5

911609875ce40a4e0b52b68d93bf8785
SHA1

a1ff070e9bc3b962de5b4ce8add423f80fcd76c8
SHA256

a1c45b6d6e29297ccf98bba182fd2b87df6e7921cfc73484314085768beb5092
SHA512

9833218cc839660e06cadbbb3f1ecce876d8fac9750f2b9c32c6be99d4d05e3e986c83328b5a62648c38af77bddd4478d4351a57aeecf702152fa35ad4158eb6
SSDEEP

384:OkcUHiiLc+jZYR3auKPhJ1YY1Qbhttj4lrKVaPgsWdc33TdSJ8YRtKG8aiJpII69:OknCi+1KJ41Htc+cPgdcoHzKtzJpIVHN

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a1c45b6d6e29297ccf98bba182fd2b87df6e7921cfc73484314085768beb5092
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ