fae37f60b894afbe0e7f3793d1f1188a034019a9378a2ca355ad2ef2d883215e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fae37f60b894afbe0e7f3793d1f1188a034019a9378a2ca355ad2ef2d883215e
Size

1.4MB
MD5

637a0fe0041aea53e6399eb1d5c5fd39
SHA1

7b569c5d74f81df58dda58744fb9fff37ecb20db
SHA256

fae37f60b894afbe0e7f3793d1f1188a034019a9378a2ca355ad2ef2d883215e
SHA512

c14dd38abe4bf7f5ec0578fc2e61f0e8d3dece145a063be7348ba2e265c5e9317ea87c3432030b76f31930c4df5da12bd1856a007dc236d3ed3784f13a0126fa
SSDEEP

24576:WLoHXqkXGEMdiX+spVrU6CZdqQKWK0/OPpkzq2L0hU/iUec7+Yw6JfMya760z:WM3qkXnOiLpuJZdqQKWJOPezYMiUec7a

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fae37f60b894afbe0e7f3793d1f1188a034019a9378a2ca355ad2ef2d883215e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 580KB - Virtual size: 579KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ