f437a61c3e827f338041d4dbfc57d3474094582d789a7f26fde285d1290423e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f437a61c3e827f338041d4dbfc57d3474094582d789a7f26fde285d1290423e6
Size

33KB
MD5

b69afe4827bac0a73370bbf6fd0dd8bf
SHA1

bfe26e2b919ab9716123a376a03a7391b6deb793
SHA256

f437a61c3e827f338041d4dbfc57d3474094582d789a7f26fde285d1290423e6
SHA512

b3a76e2825d741dfa36421d147e6ac25ba205210525dd1ff9bc2ee4cdd4ed38997602a763e6291ed0819bb2b12ad37f41be2d8755b473e0456bf9f8971489942
SSDEEP

768:W5uNavlir6O/nSnzeP7OavH5aqRs2HSHcMcfi8iCw:ouYd3OAS9v0k8cMcfiNT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f437a61c3e827f338041d4dbfc57d3474094582d789a7f26fde285d1290423e6
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ