ae1c9503e642218cb7c2f363a6a326117e87fdbbd304d1dd796cafbd6c519a8d | Triage

Sharing

General

Target

ae1c9503e642218cb7c2f363a6a326117e87fdbbd304d1dd796cafbd6c519a8d
Size

2.1MB
MD5

54931aed2820a15fa963df2d8679bf3e
SHA1

fc86a98ca27cc154de988937f591b0c724307cc8
SHA256

ae1c9503e642218cb7c2f363a6a326117e87fdbbd304d1dd796cafbd6c519a8d
SHA512

525dce525b9718e6100154e98df24f35889d3e79b9b16d2a2e99cdf2e45521b06844fa3b146346babddc6bc1593413f61f700177ebb0bacb88ed80abe3c9a1d5
SSDEEP

49152:U6LioeASOXdHvsc6Ja09X16UkVAl6vV4CPIWyY0e:U61SYEKgMUimIPz0e

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ae1c9503e642218cb7c2f363a6a326117e87fdbbd304d1dd796cafbd6c519a8d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ