9f2407b9e25c0f8baa72e4c0ef480f87781c352059ded52e693eda96b2e44024 | Triage

Sharing

General

Target

9f2407b9e25c0f8baa72e4c0ef480f87781c352059ded52e693eda96b2e44024
Size

516KB
MD5

5470517f94894de239f8afb0e9bea4db
SHA1

d1c879c299a30f42c6172104df8c6fe15a0dc6c2
SHA256

9f2407b9e25c0f8baa72e4c0ef480f87781c352059ded52e693eda96b2e44024
SHA512

3c8cc91fb6ffc4c150edb1cc992c35ec15d174570f9367095ff2480186773308971c06115dd7b59840e03ff52c5a8ccab2af3f9fe8b56c6c3d7de3a79597631d
SSDEEP

12288:Uz0ja7e+YtTagkeHon9AJPH/yzQrw9dLMHL30d0g2rKhz:UCJTagkeH06/w9tM/rKB

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9f2407b9e25c0f8baa72e4c0ef480f87781c352059ded52e693eda96b2e44024
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 511KB - Virtual size: 512KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ