fe40164aa9092780d3436139357d0c17367937b3df4446661613aecf8717c907 | Triage

Sharing

General

Target

fe40164aa9092780d3436139357d0c17367937b3df4446661613aecf8717c907
Size

20KB
MD5

1125b35c0dbc394211a8b1ef6ac577f1
SHA1

ad7753269fd85ada27fb1b6e9eb1889f7f203618
SHA256

fe40164aa9092780d3436139357d0c17367937b3df4446661613aecf8717c907
SHA512

957af7b9f19d817f5d99840cc7969ad592f862cd85138e97d418c2cc0fa5ea263ca61c042d1c8c01822a3eed404ea23d8886585826ca59ff772bbff057a8be2d
SSDEEP

384:oWGqbT3BC8qgxQ3oGUCWOO3oGzRQqvqR4cCchRLZ2ZVPneivf:oWG0zDVxQ39UBR9QqvqRB2tnVv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fe40164aa9092780d3436139357d0c17367937b3df4446661613aecf8717c907
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.upx4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ