8d73b1d03248f5061ca92029a4d9aab0b0391154753a8383472e356d54f7f5e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d73b1d03248f5061ca92029a4d9aab0b0391154753a8383472e356d54f7f5e8
Size

48KB
MD5

198a179bde37eb34b2b718f381bfbe07
SHA1

f31951ef1331caf012bf555ce83d04deb167685c
SHA256

8d73b1d03248f5061ca92029a4d9aab0b0391154753a8383472e356d54f7f5e8
SHA512

b6f1a3317de3d7f1b3f5f8147cfcf2546b56aa049c94687e606a849b74fda82b043ed2e39c21117de8509fd513f3f3c0b27513f271edd55feca2a286f2de7b56
SSDEEP

768:w6/fh8gY8H6zigshPIkahNp2hm7Ibz1dEtEDhKXfCNwlVWddk20DdAc8Ij7:9Xh/zH5gstIkip2CCzIEDhKKmhDD8Ij7

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8d73b1d03248f5061ca92029a4d9aab0b0391154753a8383472e356d54f7f5e8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ