2452a25a0fdf39733f1320177bc55439ff9dc27b74442cca58865fa9daddc7ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2452a25a0fdf39733f1320177bc55439ff9dc27b74442cca58865fa9daddc7ad
Size

394KB
MD5

b61aaa95ead74086578918ae0b7988b8
SHA1

a915b1ad6ee362357ce7f1ea1691fab78f047816
SHA256

2452a25a0fdf39733f1320177bc55439ff9dc27b74442cca58865fa9daddc7ad
SHA512

4e4a1dad50387b10a76b37fb0f1ace419a6c213723594dedfdc4ecefcb321982de9078a3930ea55960cf27c3d86a8e33e29dec9685bf40bb7d9abad042e81082
SSDEEP

3072:icqSBkE/YtyjPMRqXApqmqqX6oS/LvYoSgvvj/6C/pAg0FujBOnm2gYzUm+2bxa4:nhkCPMEMLqqQ/MWnAOom2gQ/uoCyv

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

2452a25a0fdf39733f1320177bc55439ff9dc27b74442cca58865fa9daddc7ad
.exe windows

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: 252KB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE