9f5c2b5464234c0a3431973374cd1afb520e38e61d0cc07e64b3f8a1592726c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f5c2b5464234c0a3431973374cd1afb520e38e61d0cc07e64b3f8a1592726c2
Size

10KB
MD5

375c4f61aaf2a9c827d5e780306155b1
SHA1

22f5ffe41a901e5197ed48c3c3c48141d78f57c0
SHA256

9f5c2b5464234c0a3431973374cd1afb520e38e61d0cc07e64b3f8a1592726c2
SHA512

4a43f8a1958d5c5a64b63b718a3503d8196c6987e81f1e3bd5b84ba20f44f9e450c0d32a2aaf34dc1ba16695989fe158911100237c292f685be6b8fb18b99352
SSDEEP

192:K8MTW3RguBDtJsZ2LEeLEQa1d6DqpdlJXLL:1MTvwJU2AIEB1d60XLL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f5c2b5464234c0a3431973374cd1afb520e38e61d0cc07e64b3f8a1592726c2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ