a61da13a3f25e2f008e31155e0ee5cf04303b8a4a01842dfcd252b7d8429ddea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a61da13a3f25e2f008e31155e0ee5cf04303b8a4a01842dfcd252b7d8429ddea
Size

4.2MB
MD5

fba9d74b03e662c1fbc0cb1de46d6a35
SHA1

00597d6f64f0e2ed8fd5f099492a2e02afc1388c
SHA256

a61da13a3f25e2f008e31155e0ee5cf04303b8a4a01842dfcd252b7d8429ddea
SHA512

a90eae3689e95afeef0c0700d0e7801d840349da238fd38cc064aedf9f6a24b3b0400cb137c1e5e6b11b1e1a73777b5828db8b3e4b6b991c3740af914fd79c7f
SSDEEP

98304:Q1Nzhz2YWqEq6VWCtoXOb384K4WJ6oCSg0PaMcO1TTl:Qdz2YWflVZGXOADCL2jcO5Tl

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a61da13a3f25e2f008e31155e0ee5cf04303b8a4a01842dfcd252b7d8429ddea
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ