abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698 | Triage

Sharing

General

Target

abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698
Size

34KB
MD5

16733b4c328622b2dbc4b062214cdd22
SHA1

c1ebbb333f7b8c36615f12c05d9522e3ac7ab64f
SHA256

abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698
SHA512

d3b8fc0598e1214bbe39816b8f0caa0406e7b813d3da19d11fa08f2bbcdb6cd6bc4e0f428fad70fc2859304bd8a41d9c9d12f8dcbe4d7950d7fe50762f51776e
SSDEEP

768:I+6RcpA0HJXVGQwxspJgwivSBEaoV4jZ34agYUtqZ:ILa3H2wim1oV0dJ+C

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

abb9cc05863a9a471b365643773198df2dd34623296c3447a655274b0fba0698
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ