9f2df5679d560cd7c8495c98b97789b84ac5b06f4ab49056917603b81c13184a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f2df5679d560cd7c8495c98b97789b84ac5b06f4ab49056917603b81c13184a
Size

593KB
MD5

e00147e86e9c630ece489ada066bdfde
SHA1

cd8d663475f27c226c1e4f755ca708fda9f8b4b9
SHA256

9f2df5679d560cd7c8495c98b97789b84ac5b06f4ab49056917603b81c13184a
SHA512

f402d344f28435ef6a121f3e7dbde4598e744d4ab41e34d2d3ff9d678c8b20f89f5b9c2a815cdd3bdf23c4a0a1ac36d9b536f5f2d4fc9a9f6bcaf27357a6d12e
SSDEEP

12288:h6pG9M9erwheKb8nxcJfbBQ2DVEz7BUd3sh+iYY3HgalXvwAL:h6U9MA894nOJTBQ2pEzad3sYiYYQIfZL

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f2df5679d560cd7c8495c98b97789b84ac5b06f4ab49056917603b81c13184a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 660KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 589KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ