d4279a215ad20e5837920cb7b3eda0b01173ac9f36efca083d4ae33400efc74b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4279a215ad20e5837920cb7b3eda0b01173ac9f36efca083d4ae33400efc74b
Size

149KB
MD5

885c3bb6d22233f8e8bbf323c222348a
SHA1

6c816346c4466377484c1cfbe5bca13513f4bf02
SHA256

d4279a215ad20e5837920cb7b3eda0b01173ac9f36efca083d4ae33400efc74b
SHA512

72fdb5a0b436797a388638490c5a4bc740388b42ffc74d4643d304c63a0380099b103b23367cb7332baabaa42ee85f9bdf58d77cf1434159356e730584dd57c9
SSDEEP

3072:ejoAGGykuSg7dNOfuj95/KyRG9LDW8tU27Lxq4OyljIyGcnsSLF9NSAf:SoAGGhuB7dNDj/K1yyU27ERyxNLl

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d4279a215ad20e5837920cb7b3eda0b01173ac9f36efca083d4ae33400efc74b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ