8ed81f30ad318102e0269a9d11fdfb818bf990e251db463abc81bd5febc4e7a8 | Triage

Sharing

General

Target

8ed81f30ad318102e0269a9d11fdfb818bf990e251db463abc81bd5febc4e7a8
Size

153KB
MD5

69a59e0f76453b393aefa895c79c6a11
SHA1

dc87b0636e4e951df7f786fe14eddebe4a125334
SHA256

8ed81f30ad318102e0269a9d11fdfb818bf990e251db463abc81bd5febc4e7a8
SHA512

d5a092a5ba25538d56b3e06e7ebd6ef900211bb01d4615fe1a67d8bf222d7b6fe981710bdb546a7b80c7080ae8e440aadaec0192bde055ba58e1cefe515bcc65
SSDEEP

3072:0Wc4SzItZq0qg1cojZaYBAHr1WgnN0n0MPfCizF:02+IrqjeasALMgm0

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

8ed81f30ad318102e0269a9d11fdfb818bf990e251db463abc81bd5febc4e7a8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 376KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 500KB - Virtual size: 499KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ