ae20d8e5f46c6ec79c05b0a354286fd80e78113f036f1d2daa14835e74ae12e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae20d8e5f46c6ec79c05b0a354286fd80e78113f036f1d2daa14835e74ae12e0
Size

96KB
MD5

7069995202d57bb6041e294bc8aecced
SHA1

2997e61a0d801ad8b08b50aa71ae6e0bb7567aef
SHA256

ae20d8e5f46c6ec79c05b0a354286fd80e78113f036f1d2daa14835e74ae12e0
SHA512

f48e08148f243e6700ba80aeb9b8e078ba6151396c18a66404b22e708d48305ffb52bd0f79a5bb56628f0d5d05d9c6e3ec251ba2bc9ab993653ded3d4c1a1796
SSDEEP

1536:aWVJYRrt958UEfYVP/CUiqJA8ickdNqGR+ppofzOhk3UvBTgVVQav6WR:1IxAUWIP/C9oVi5d3RlfzOefV6fA

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

ae20d8e5f46c6ec79c05b0a354286fd80e78113f036f1d2daa14835e74ae12e0
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 424KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�r�
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE