d2a162831cce73e162c17468c72dea1485ed7a6f8d903f129d903895e4ab2719 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2a162831cce73e162c17468c72dea1485ed7a6f8d903f129d903895e4ab2719
Size

31KB
MD5

77342a4f2de2d81e9268096768e2d7c4
SHA1

17e4c293e8d8a030859a07d6acadeb267d0613a7
SHA256

d2a162831cce73e162c17468c72dea1485ed7a6f8d903f129d903895e4ab2719
SHA512

b4d87905331e2433b2e2b7b130e1cb283200bdbc63240939169088a401ffb050567f19891cd704ed41fb01815f0942ef72e6c3d2dfda7c90f8d3d144b23f25f5
SSDEEP

768:efhIMjD2TT05CvULkku83FTan9WCDr/OvVs:qh5D2TgIMkO34YUO2

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d2a162831cce73e162c17468c72dea1485ed7a6f8d903f129d903895e4ab2719
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE