9f3fed4ac11369057e09582a8e594893e9c51c2d5b1988b1d5ccbe52d145353d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f3fed4ac11369057e09582a8e594893e9c51c2d5b1988b1d5ccbe52d145353d
Size

15KB
MD5

f22941078e562b307a690c9510fa6b01
SHA1

26563d334f56f35fae5b214aa958ead8c79238e6
SHA256

9f3fed4ac11369057e09582a8e594893e9c51c2d5b1988b1d5ccbe52d145353d
SHA512

29cc51ec115fbbe234a05b6a44195f3d789c9afd4bb170a4a5519e5f6962cb4be61d2aff473e3d02d0d2278861ed156dc18a19f7d520616ddc56ffdca05bae67
SSDEEP

192:Md8NUMfDYK7vI8Aa/ASFyqtOenrh7lB0wvgI5msmGWLGijY0+EddfrLi:Md8mMPvPPycOerdlB0Mbm5qw77j3i

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f3fed4ac11369057e09582a8e594893e9c51c2d5b1988b1d5ccbe52d145353d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ