9264a0cb4430215606571b4490b77a48ab5d0e65698820b1d36493a2a4d967b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9264a0cb4430215606571b4490b77a48ab5d0e65698820b1d36493a2a4d967b2
Size

347KB
MD5

1d54a248d1caa8e7ed3f7701344441e9
SHA1

2219d459e14820f0e56be91df0619635e7b346d2
SHA256

9264a0cb4430215606571b4490b77a48ab5d0e65698820b1d36493a2a4d967b2
SHA512

4c7feb3cf693071c2a1eacb2f383d8e40d819556cf8bca6e54ffa0f59cec0fc1be946c441e96ddbb47c7f08fed37904bf461a615a2b15a9c4bae7ae589d2c447
SSDEEP

6144:LQGPMq3hsPL3Dnvc16ch5+sBzk6JkCOENuWbL9aXQSV70xT4cSFnlGlb6tvdMcDo:LHEq3iPLTnUJoaYAkCOE0Wm7MvK8odJc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

9264a0cb4430215606571b4490b77a48ab5d0e65698820b1d36493a2a4d967b2
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ