a232fd04777123c6da8d7b826fd2cd9e5114badd1a78b78bbdf58ecc486631c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a232fd04777123c6da8d7b826fd2cd9e5114badd1a78b78bbdf58ecc486631c3
Size

785KB
MD5

8623a6352014ee7403b26738064bbe63
SHA1

acf665e6625926e0f8422d733924dbb1d1f8de22
SHA256

a232fd04777123c6da8d7b826fd2cd9e5114badd1a78b78bbdf58ecc486631c3
SHA512

4aa7df11405bdfa07d0453bd9c083bebe3be9b06f6abb6a6be62f010760656f1bd5c961e448ab59f22f9b068b06448983fdc135d3e77e17390aedd06b9e985ca
SSDEEP

12288:RUCsHEvZ3bP1ncaJ9fsYBb5tUkSgYJQ8NI8v2fVKDe5SIWRbe0vycVKxuT1KxuTj:zVTW+9fwBN2fpnQi/bETYETwE

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a232fd04777123c6da8d7b826fd2cd9e5114badd1a78b78bbdf58ecc486631c3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 328KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ