9d5d6ab3695470baf9537ceed8f5fc44feb8099bf5bba018594885a00871d6f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d5d6ab3695470baf9537ceed8f5fc44feb8099bf5bba018594885a00871d6f5
Size

5KB
MD5

a28650b771bed9e5fd533e7c87af754f
SHA1

109587d93286f4fa3199656accc915bbaded830e
SHA256

9d5d6ab3695470baf9537ceed8f5fc44feb8099bf5bba018594885a00871d6f5
SHA512

dd1f8de6ee5c31efca34ee513f83def9a0467014046b09c44dd94f51cd8d704b8811f41b833add14707d0fd06e7681c86c2c4487ce050f0462f1c557fa32ed79
SSDEEP

48:ygEmujr187wdVMk8ZeOYvSeJY8JTaqLJ2BKZxMw3wYwEmAgB:kP187wdVYlgF2BLwwEmAg

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9d5d6ab3695470baf9537ceed8f5fc44feb8099bf5bba018594885a00871d6f5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ