a8321b3a655622dee1b312f8bb4c6ab1f9571f53e159138ca92e8d55ea821b74

General

Target

a8321b3a655622dee1b312f8bb4c6ab1f9571f53e159138ca92e8d55ea821b74
Size

104KB
MD5

578151c53094e513282bb6a461d38f40
SHA1

925eae489c4fb7c30f7fdb454171dd5caf2972f4
SHA256

a8321b3a655622dee1b312f8bb4c6ab1f9571f53e159138ca92e8d55ea821b74
SHA512

14a2ad47db0bface54bfd50ac6977b6b22451ddb7fd6130c4aa1b149165c82e3cfa7409deb7094c135226c57c3d7890e2d2e0e0a9339d2abcb43184a75df50d9
SSDEEP

1536:QkVtUl2C/lc5oXiU/XATZelpWlSImmwKTgsKRiPNCi9dOWArPMUGxspRiYCFsrX1:QkPU0sc+SRZkWEVWIRM2UUMI4sDvhj

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

a8321b3a655622dee1b312f8bb4c6ab1f9571f53e159138ca92e8d55ea821b74
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.idata
Size: 36KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRT
Size: 22KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 184KB

UPX1 Size: 94KB - Virtual size: 96KB

.rsrc Size: 9KB - Virtual size: 12KB

Headers

DLL Characteristics

File Characteristics

Sections

.idata Size: 36KB - Virtual size: 73KB

CRT Size: 22KB - Virtual size: 52KB

BSS Size: 22KB - Virtual size: 56KB

.rdata Size: 19KB - Virtual size: 21KB

.bss Size: 8KB - Virtual size: 36KB

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

UPX0
Size: - Virtual size: 184KB

UPX1
Size: 94KB - Virtual size: 96KB

.rsrc
Size: 9KB - Virtual size: 12KB

.idata
Size: 36KB - Virtual size: 73KB

CRT
Size: 22KB - Virtual size: 52KB

BSS
Size: 22KB - Virtual size: 56KB

.rdata
Size: 19KB - Virtual size: 21KB

.bss
Size: 8KB - Virtual size: 36KB

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB