97306813a9657c4cd0b92764d96124298c7c150e2ce8ce2e5ec3a3b6a08e3797 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97306813a9657c4cd0b92764d96124298c7c150e2ce8ce2e5ec3a3b6a08e3797
Size

40KB
MD5

242b8f5ba90eead3f1273a2badd43051
SHA1

ec15863610d26d0abecb76fa1d37babcbeca3635
SHA256

97306813a9657c4cd0b92764d96124298c7c150e2ce8ce2e5ec3a3b6a08e3797
SHA512

aeccd86f2abbc3e6cc33bd3a9ce980b339e2abe1a615fb3d9b650c7be7a2a12f19a44890db1916bd2dd4d8ab0a3fc842b1e0a456e74331e4413f17281ad46f8a
SSDEEP

768:80wd/CRHYKA3YoqZ5jytved4ifVLMTlOjTOjOS2EK0a3qkW:80wd/CRH43YJZ4t04kMZcTTSTK1TW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

97306813a9657c4cd0b92764d96124298c7c150e2ce8ce2e5ec3a3b6a08e3797
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfre
Size: 29KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ