aa22d1de7c562af8747fbae7af1f16dc9191a5dfa68c1fa60c2c8bc9b5676888 | Triage

Sharing

General

Target

aa22d1de7c562af8747fbae7af1f16dc9191a5dfa68c1fa60c2c8bc9b5676888
Size

92KB
MD5

dbc8388a99e6547388338a56b221fa38
SHA1

e6c4606a13a56df62da129cd3c4e181972c5d5b9
SHA256

aa22d1de7c562af8747fbae7af1f16dc9191a5dfa68c1fa60c2c8bc9b5676888
SHA512

9aed85ba5cc64bed5f09087114b85b8f9270e5d6aa0a606787ad14d085f0be3865b68d1d9332d0f90571f696ba959ff36f43b7b7a5f16c4d7bb1ab8296f07534
SSDEEP

1536:jkgfroez/c0keqohis9YF3q4y7qtAbp8lnKZ/zzktQTJ+2O6NJGKU:Jf0ezDdqohGF3vyWWN8Rknw2O6XGKU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

aa22d1de7c562af8747fbae7af1f16dc9191a5dfa68c1fa60c2c8bc9b5676888
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ