74573557a00d2ab5c8827347d9965bdad028594371d3c1053b1c25032088e90f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74573557a00d2ab5c8827347d9965bdad028594371d3c1053b1c25032088e90f
Size

1.2MB
MD5

439ce818463af9621db1c81dac969066
SHA1

6ea5dd66861ba3b0c820fe7a0c2d2b629c28b22e
SHA256

74573557a00d2ab5c8827347d9965bdad028594371d3c1053b1c25032088e90f
SHA512

acafdccd3c845dd4adfc342a8bcb60539423e95afb38ad9f063b6307393bb5a7541d960c4e2c25db0f208019f866a1fa2c662b4b0c741c981c1d19d24da667aa
SSDEEP

24576:wNseVg7kAfPSoCzmWYy17ZOko1xMAQAbaMmJktC4S3hdrV2zzx:wNLVg9fqh+ko1xU2aMmJx46LczF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

74573557a00d2ab5c8827347d9965bdad028594371d3c1053b1c25032088e90f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ