739fa5835ce9ae8766b79bcea5c4c9e183bb964e0987a957251181eb6939473b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

739fa5835ce9ae8766b79bcea5c4c9e183bb964e0987a957251181eb6939473b
Size

37KB
MD5

b8c7eddbe74ee0f6131ec3a772832e42
SHA1

7b09e51096ba2dde4219fd762cb95b46b7af9ccb
SHA256

739fa5835ce9ae8766b79bcea5c4c9e183bb964e0987a957251181eb6939473b
SHA512

95bf363eba3db504d80a6bf269bf6d889d3deaf2f97f812accbcf166394cc81c391b1a5587eed81769efdc530630d549152e48868deddc815f73d4e0b7ed4454
SSDEEP

768:fHgFY7UyMpXZ9yLrO63sodN03ZggUPjw7+enqpcuaU:fHdUyMppkrJsob0Jgfjw7HuaU

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

739fa5835ce9ae8766b79bcea5c4c9e183bb964e0987a957251181eb6939473b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ