7a4392ffdd637e7f315196d9b5a3a5ca615ef7ff5930d7cb04083938560e097c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a4392ffdd637e7f315196d9b5a3a5ca615ef7ff5930d7cb04083938560e097c
Size

94KB
MD5

58bf7585a4fefce2624da0b836be8f17
SHA1

71e7dbff6391c257bf9b919f88051cd139d551a1
SHA256

7a4392ffdd637e7f315196d9b5a3a5ca615ef7ff5930d7cb04083938560e097c
SHA512

a10dc9ffec588f37e1a9be0aee4df034f6042e4f51641992b16da340c0754816d966c8ae803d59a82b4db5346d055f017224d959b0feb525ca0847b798a32973
SSDEEP

1536:5kSzVG43Rs6G1wsjWHVpaamBHnNMoXkDCjW:5NQOm6GB+VDSHNlskW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7a4392ffdd637e7f315196d9b5a3a5ca615ef7ff5930d7cb04083938560e097c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eryhtuc
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE