a47256e1594011e5a4908173e13edd9b94267f1796159878a168b2ca95707455 | Triage

Sharing

General

Target

a47256e1594011e5a4908173e13edd9b94267f1796159878a168b2ca95707455
Size

274KB
MD5

faa4f9322f82e3b1c2219ef60f21f4d5
SHA1

6195e3423d7f0031309bbf1708f6e72f19cd1fb2
SHA256

a47256e1594011e5a4908173e13edd9b94267f1796159878a168b2ca95707455
SHA512

de0eba92399dfd9fe79453ab04a0c8d05efd6bcfc015d059c4f0bfe414c81a814992b3f29e6e0f3c554c63ec2a1ecd82aee6c216c6173dd47944992d8b8aac1e
SSDEEP

6144:290tJ8/FY/P8TOrhsHhJa80F9Hdj+6Y/ayL6aCb0Zakyfm:qMJ8un8arhSh5UF+6YrCb0Z1yu

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a47256e1594011e5a4908173e13edd9b94267f1796159878a168b2ca95707455
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ