d9e7e9b4314ded85ad94f6ccc68d105dce44ab5b1cfdc122eed8c0c23e64f7ee | Triage

Sharing

General

Target

d9e7e9b4314ded85ad94f6ccc68d105dce44ab5b1cfdc122eed8c0c23e64f7ee
Size

29KB
MD5

88c6c7b6d8e0d760b604625e77b86b13
SHA1

6d9803604e2cd6b91e2b4a329e6bf28ac86d035f
SHA256

d9e7e9b4314ded85ad94f6ccc68d105dce44ab5b1cfdc122eed8c0c23e64f7ee
SHA512

a66f78e143ae224faa05cd9ec04ce6f892664cb65458fbf7973bf4300174cb0471ef3c8d5a14b4c22da72881292d8f267dc02f24717504355993030f48cec652
SSDEEP

384:NsBVL6WfBGw34VdiBOjbTtBHV4+1Ikap+xGEG77dsxK0n7mipC0tjZSouW8eal:NItBGw36cBwt+kaT9sY0n7ltjIouWv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d9e7e9b4314ded85ad94f6ccc68d105dce44ab5b1cfdc122eed8c0c23e64f7ee
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ