92af64d79e544b02dbd27db5e1f44dc519bf1c87bc94ee62f4dcf31a3197d4bb | Triage

Sharing

General

Target

92af64d79e544b02dbd27db5e1f44dc519bf1c87bc94ee62f4dcf31a3197d4bb
Size

52KB
MD5

1e754c334053c90074a37911cdcd3786
SHA1

e18d626fae4a6d271042e4ebe822baf3467ca633
SHA256

92af64d79e544b02dbd27db5e1f44dc519bf1c87bc94ee62f4dcf31a3197d4bb
SHA512

630e028712dd6b8169bbba6343aa32075db518425d817b95f6a91c87f1251c8869e831b0f312569a8c106436745c5874e9fadca3e5f603a88b278ea84d1c2cfd
SSDEEP

1536:640W7EVhezm4OXQg1S0Z55Obce5+sT7EW:69WQ4zm4OAgt5I4uZ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

92af64d79e544b02dbd27db5e1f44dc519bf1c87bc94ee62f4dcf31a3197d4bb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 4B - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R2RC
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iDATA2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE