9a31d7341fe1fa096bdbd1a94301921f0279ce32e8eeb8d58815de0d800a47fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a31d7341fe1fa096bdbd1a94301921f0279ce32e8eeb8d58815de0d800a47fb
Size

1.1MB
MD5

737c780ab238fcbe82e17681abd21bb6
SHA1

5d664fb2f46a825b2cd4386f927b335b9fc326ef
SHA256

9a31d7341fe1fa096bdbd1a94301921f0279ce32e8eeb8d58815de0d800a47fb
SHA512

f2e5d90c174c2bcd1e22ddedb23a336146b5276d54d091714e1e1474a7fc03c8a03fcbb2a112d7f9d53a82f8d809003c9270d6d94b3fd466327341ad85d43315
SSDEEP

24576:uN9woWEQlghiZTVkx0HjBwdgZ9VmR5E69KOUaG2ohDYBar1X4l+RaCpXZW:LEQlZTSxQjWGor9iahohUB2Z4lyZW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9a31d7341fe1fa096bdbd1a94301921f0279ce32e8eeb8d58815de0d800a47fb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 947KB - Virtual size: 948KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ