4d5094ef6f43ef60199e94883b086bf9851578a2c7421dae1d99bf314499abdc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d5094ef6f43ef60199e94883b086bf9851578a2c7421dae1d99bf314499abdc
Size

339KB
MD5

14a8cb1a02092ff943c7bbb8ceea0474
SHA1

102a69a915e2d93454e6e2cedad7f29dc9fa3b14
SHA256

4d5094ef6f43ef60199e94883b086bf9851578a2c7421dae1d99bf314499abdc
SHA512

2b3ea254967905e172e023b339a41f36bbfaf1d7140f63a455170eb32634031e7ef6280700787dc19019a389429508c68e152c9bc4ed4862ffadbd4295b12e47
SSDEEP

6144:OoIiy71bP/rGF7sWvTiodsRHpttg8IMr5rvxzdqZyp+nGmxLR877GR:OU01bP/roveBttg5u5rvqZyp+nGmxLRP

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

4d5094ef6f43ef60199e94883b086bf9851578a2c7421dae1d99bf314499abdc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 311KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 484KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 584KB - Virtual size: 581KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ