9ee972f7400372cd11c03f5c1c121de197969b466581a4601c2e54f30e8de5d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ee972f7400372cd11c03f5c1c121de197969b466581a4601c2e54f30e8de5d9
Size

165KB
MD5

1d180af6379fa6029e4374f834a2f440
SHA1

31ac4fcab2b4391685e18d9be660bc1471de2b3f
SHA256

9ee972f7400372cd11c03f5c1c121de197969b466581a4601c2e54f30e8de5d9
SHA512

2f95e768b3c590831f1152aaaaf29b627638427560985d87d8a9f2dd21ecbe2b516b92263602ceb92e91e60414c5567a91a4fbf908460403fd7b69bb31988212
SSDEEP

3072:yuTeipVp3gJV9muHVtrEYsUQk63mrNfXtI/aVYCDRWRZgq4FHghwcJ2EltuVG2:9Txp89JVZEYsMrZtI/vq6g/cJ25V

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9ee972f7400372cd11c03f5c1c121de197969b466581a4601c2e54f30e8de5d9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 80KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_MEM_READ