9fe70111bce4d3c6399ff5b88a18163e3d5c85ca98dd4e96aca46d61d4877a07 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fe70111bce4d3c6399ff5b88a18163e3d5c85ca98dd4e96aca46d61d4877a07
Size

91KB
MD5

56e58f29c385352be2cd06b7761f79ce
SHA1

a299ff0622e9e74e3b09ae88ebfe7ff1189d1426
SHA256

9fe70111bce4d3c6399ff5b88a18163e3d5c85ca98dd4e96aca46d61d4877a07
SHA512

3fada6936783b7d04a3b0f8bced3eb00f891751d2a375215d568216369de4fb0765b68559216ea13d334c2ccfabad76794cc8a10503ae35b77214e41fac21a81
SSDEEP

1536:tWQmIHxb0J6FepxaQaKx3xabzr85wN2TuExN/4J2LUh8u3jAtQ6LV:gFIHxb0w63Bx3xXW0umrLmh3jd8V

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9fe70111bce4d3c6399ff5b88a18163e3d5c85ca98dd4e96aca46d61d4877a07
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ