ace65be22d9a6213955fedd8358889a860a5acc08eea52ec701a8ef77319a6ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace65be22d9a6213955fedd8358889a860a5acc08eea52ec701a8ef77319a6ca
Size

535KB
MD5

1d4ef5d2c2453e00058cdc56d5bf4522
SHA1

b960ff5d15ff8181019403b65917c5c06ddcb5b9
SHA256

ace65be22d9a6213955fedd8358889a860a5acc08eea52ec701a8ef77319a6ca
SHA512

610d0867d5a4cfc9ad3d5854437aa75bc194c4d3005cf4b9a66d07288559665149f1a7077c8d0d91071a23940a8df9fb807b368466a2e621d09570baa141bbb0
SSDEEP

12288:A3yMIjATx1Hvqo0e1aqIjNGmT5Nj/UGZpAwksB:GyMIATLvqol1BsT5R7ZW3a

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ace65be22d9a6213955fedd8358889a860a5acc08eea52ec701a8ef77319a6ca
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1012KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ