a57d63d83185c16d4896036586ed5c24e48b537d387d759ddda0a1667345243b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a57d63d83185c16d4896036586ed5c24e48b537d387d759ddda0a1667345243b
Size

192KB
MD5

49bf79a2f7cf3fe8e83c2375a899ca86
SHA1

e2f742d78013bb47453e50e6a8394a680d3f45b9
SHA256

a57d63d83185c16d4896036586ed5c24e48b537d387d759ddda0a1667345243b
SHA512

01208a9d4c5c34f933a354355ce255dd0577a997bdcdb18b7416e32086e74e5175aec9a32cb0f9c65c594913a238d0754ca6888439d239ac68bc5436c5596429
SSDEEP

3072:0X3quxI9jBPsJDPC8vvlKSxT5nDamTrJBZGYrodJzpHFj2OjrA0:8SjBkD3vljx9DamvJBQAoZB2480

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a57d63d83185c16d4896036586ed5c24e48b537d387d759ddda0a1667345243b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE