General

  • Target

    upx.exe

  • Size

    552KB

  • MD5

    28d3c8729e9f32294b0a239a930ce485

  • SHA1

    f5772134c2dbd15b4583bdd6896f46bcc3815ffe

  • SHA256

    b84ec2578a0a202aa84d3c41b4549dddb6dded096baa8d732b1c0cb0518c66f8

  • SHA512

    02c8daa6d37874dd1e6a38ed55869d690fafb3ddbf475c1ac0b0959f8f1b43a0456e293d3db6c4f9546468c3729ab6eb2163dcb5c99bed34563bb0c8aa5986b7

  • SSDEEP

    12288:BhLxVNdR2H62VyxwAZsOrvEJ3LBmoKH/qOaUjnDB57BIhKBzfnl/zR:BhFVCJMiveKbBQvaUjDB52K1fP

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • upx.exe
    .exe windows:4 windows x64 arch:x64

    Password: dtz


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections