b9de40939c276cc13bd09461571a00f89b3ae8472b05b8db2f8a723062dc537c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9de40939c276cc13bd09461571a00f89b3ae8472b05b8db2f8a723062dc537c
Size

10KB
MD5

c1352896ed837bcffa01696b65d75315
SHA1

83a82523c3314668377047a077c30a135b153bad
SHA256

b9de40939c276cc13bd09461571a00f89b3ae8472b05b8db2f8a723062dc537c
SHA512

7c4de0a1b501da4a730e6f1ecb141e0e2ca0dc3707ef101c8556b00087e5eb25a6af4478134c69f0ccbf943067a9bd09d0af7158220fb54740032058d977b504
SSDEEP

192:rn1h1Q8YWppkeNM29uf/msdiFJaGBHr7ug++WZ73LT6mro9:5h1Q8YkKuufOYiFZHry73LDro9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b9de40939c276cc13bd09461571a00f89b3ae8472b05b8db2f8a723062dc537c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ