afd4f6c7806de5aa8d3cd08ca0e5e28a24a2abedbfbeed4d15e11fffe6d77e87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afd4f6c7806de5aa8d3cd08ca0e5e28a24a2abedbfbeed4d15e11fffe6d77e87
Size

2.9MB
MD5

c85465e58889361648d869f6cd23bf8e
SHA1

579302981bcbc35dc05cde6138f2caa6f2a452f0
SHA256

afd4f6c7806de5aa8d3cd08ca0e5e28a24a2abedbfbeed4d15e11fffe6d77e87
SHA512

02c87b08cbd2f3be8df1ead60fda1a9e221112f49a2a501cb40650aefb693ad87d5e3844a1a995e6e121e3bf9a084ee89a16ce45d1e827da88723e46c07a7b4e
SSDEEP

24576:aaN1R6Q9pp5OOXy814bb3HxFgNZfEpQLpNneZyKxSmNJEacau1R6Q9pp5OOXy81Z:v4o4l43

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

afd4f6c7806de5aa8d3cd08ca0e5e28a24a2abedbfbeed4d15e11fffe6d77e87
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 532KB - Virtual size: 532KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE