869e8794aa78fac53802d92120ebd8e4cfce2e763f27a380ee125eef60f2bbe9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

869e8794aa78fac53802d92120ebd8e4cfce2e763f27a380ee125eef60f2bbe9
Size

1.2MB
MD5

7a96e434d5420e84e6e55ebe28ac5ba2
SHA1

e639295ce26b4f826f6cbd204ca09a10dab9b65a
SHA256

869e8794aa78fac53802d92120ebd8e4cfce2e763f27a380ee125eef60f2bbe9
SHA512

2a216d839359826041dc86835982b42b945b8d472449e6eac23b6fca4f1c98be84ff7b9b621423b11b0bd40db36087dbc3eca9383e2fd65867a595c4ca1de0d9
SSDEEP

24576:DpB4q9GI/GBHzATg0U1Ydx6RT7DJwD1O4iZJK:Dv1jOA8QiT7twpBoJK

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

869e8794aa78fac53802d92120ebd8e4cfce2e763f27a380ee125eef60f2bbe9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2.1.
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE