92d730f1e8aa6dc9511fdcae70e5eb042ea89eae92b53d6bfcd1e22c9991a84d | Triage

Sharing

General

Target

92d730f1e8aa6dc9511fdcae70e5eb042ea89eae92b53d6bfcd1e22c9991a84d
Size

148KB
MD5

05639b8124b0351afd81622bd60dfc4b
SHA1

822798e5681c3ffb38fc082c769b3c93544605b3
SHA256

92d730f1e8aa6dc9511fdcae70e5eb042ea89eae92b53d6bfcd1e22c9991a84d
SHA512

b8b2616b520e307b99b60e4b992406a2ded6a893c5ff316d067529a538905e5cce4cef1121c5d2feb981046a78685469e955f1cef70d746411f2dfd4dd63cb2b
SSDEEP

1536:LwmYBwCBH5nW0Sg7iA0L5CgN1FSiDrNWuYoe3AuC:LwwCBHEEUL5CgF9DpWuh3uC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

92d730f1e8aa6dc9511fdcae70e5eb042ea89eae92b53d6bfcd1e22c9991a84d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ