9eccb72f6129d3ef8d170cd3c659a298ea28be96758912ce1b816235f1fd4553 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9eccb72f6129d3ef8d170cd3c659a298ea28be96758912ce1b816235f1fd4553
Size

37KB
MD5

61c231c6fa1067b091c77c5ea8879990
SHA1

ee3d6926f2780e29303e8dda3e4aa114bc4eae9c
SHA256

9eccb72f6129d3ef8d170cd3c659a298ea28be96758912ce1b816235f1fd4553
SHA512

4f37596ac4cdd9f73803dffeebb88d921416690f3c3304ad1a2a24646db5f70306fcf260ffdec31a12d977aef2355e390ddb750a092c90e6961e55377c4a7205
SSDEEP

768:IXSh0a02JTLo2cPe9VrRvzt+DIMm7BqKvucVm0DfFK:D0aTqPWPvwOI0DtK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9eccb72f6129d3ef8d170cd3c659a298ea28be96758912ce1b816235f1fd4553
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ