af10efb7dec48f46d543804600ddf444ff92079b8e328ffb60dd31c0607e8adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af10efb7dec48f46d543804600ddf444ff92079b8e328ffb60dd31c0607e8adf
Size

160KB
MD5

ed535e1dc5172222d5ca56ccf61c9f26
SHA1

dedc287abacc03f0870010e83851ecb6d9211239
SHA256

af10efb7dec48f46d543804600ddf444ff92079b8e328ffb60dd31c0607e8adf
SHA512

891b6a5de74787fb3be85c7e2ee812012c79a81ed47bb4cac4dd74bd5d58e692b3decbd4297e814deecc43c6b6487606b2971d07b122eaba7cc34410575c34ca
SSDEEP

3072:7XI5ueCU1Z3jOtcPDyLMwrPd0zXAZlbdlmkPEBrGtVZ46ng+:78TeaIpd0DAZf0oC6ng

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

af10efb7dec48f46d543804600ddf444ff92079b8e328ffb60dd31c0607e8adf
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 512KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 349B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 233KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ