b9b40ed58022a74ac2796c3f2433c7e3506674da4b218c6b27c6204628c03974 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9b40ed58022a74ac2796c3f2433c7e3506674da4b218c6b27c6204628c03974
Size

87KB
MD5

126aefb737d4d514b06d9d6abd5f6d10
SHA1

df91a46e2bfada697f6de012fd1c2f4ea7e53fae
SHA256

b9b40ed58022a74ac2796c3f2433c7e3506674da4b218c6b27c6204628c03974
SHA512

fceb2b2358c7bd804d900cf8544cc1cbf535868d451443a7a09aaf32aae1265e111158e1f7f7428b740da33aee97f2928f3eaed4f783d4ac28b202f0783cd11a
SSDEEP

1536:eoFnvHqQuldur+NLMn6YYAbSxhe7ZsLbIYdn:eYKWndYLxvIYdn

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b9b40ed58022a74ac2796c3f2433c7e3506674da4b218c6b27c6204628c03974
.exe windows x86

c495c5565ba86685ed86ae8dc1103cd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetProcAddress
LoadLibraryA
GetShortPathNameA
DeleteFileA
Sleep
lstrcatA
lstrcpyA
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
RtlUnwind

user32

wsprintfA

Sections

UPX0
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE