a6c08b16b056f35cf89aead2b4546467d5a287c0108d4aea331dc820fc8df20b | Triage

Sharing

General

Target

a6c08b16b056f35cf89aead2b4546467d5a287c0108d4aea331dc820fc8df20b
Size

77KB
MD5

d2ad447007401bc827a2fffab1dcc081
SHA1

c31596ad52396c31fa86d4e06de50ce238f7553a
SHA256

a6c08b16b056f35cf89aead2b4546467d5a287c0108d4aea331dc820fc8df20b
SHA512

c7441c84944c0fda1f85ecda91ad864a14bbf3a108ade88c4519dc1391ae36f678081aa1372309490372478e3dd9f8cf2cab668958c2fe13e373ec2b8a93eb6b
SSDEEP

1536:W26Ia7H9O1tULKMa7tnuETGLis/3scovpcYNkRiv6wYaYt/KMxWN:fE9O1gZa7tuSGLii3sxvvaGhYVZxW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a6c08b16b056f35cf89aead2b4546467d5a287c0108d4aea331dc820fc8df20b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ