ef4f456a8807e17150abf2d2492b6c06a62d01425ff03f1c1c7045ad32a60162 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef4f456a8807e17150abf2d2492b6c06a62d01425ff03f1c1c7045ad32a60162
Size

506KB
MD5

99654a0079d07f12a2d5d332a27e5cb3
SHA1

34b7a2a247e8905a39a175fdf5088851183877bb
SHA256

ef4f456a8807e17150abf2d2492b6c06a62d01425ff03f1c1c7045ad32a60162
SHA512

ead85c3eb0204eff0b05b78bfd612137d59ad1b31ba3ade7bbb3e32d240d21ffc4cd2ee38fb4e53873ee589577910042f6e4f9127f20486f50612981b4eda055
SSDEEP

12288:iCrLNIX7MZo+2UFl7O6jU9fScEz/WvUN+i5HN50rnfl3Ezn:iC+7M7y6jUALaRi5HUfNE

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ef4f456a8807e17150abf2d2492b6c06a62d01425ff03f1c1c7045ad32a60162
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 502KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1008KB - Virtual size: 1010KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ