a6bfafa910af43b81b97a2fa6b3879735a5c1a70b920bbab1ddffbbc0c789abb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6bfafa910af43b81b97a2fa6b3879735a5c1a70b920bbab1ddffbbc0c789abb
Size

36KB
MD5

28303935ff455ec379efa300b7e45615
SHA1

62a9fd5ef3bac8f032cf8d3feb3bdc2080ad80e0
SHA256

a6bfafa910af43b81b97a2fa6b3879735a5c1a70b920bbab1ddffbbc0c789abb
SHA512

99064c7d54edddb46e549b646812b34addef36d61811ed18b65b3e1898778520a2b136f0a4f2b016e668b0980b48938266bae0d031b01312c965ec600675c8f2
SSDEEP

768:GXERrZUrOcXAfw0lW7WZcY+oX5xGXS99ytlJaZ5uhRn0Kd:QEF8OcXAIEwRcxTKJaZ5uhRnXd

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a6bfafa910af43b81b97a2fa6b3879735a5c1a70b920bbab1ddffbbc0c789abb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ