bf141681459bfce54c1eca0f9ff739f7e0a28ec95fb49e05cc78ddf7d31dd64a | Triage

Sharing

General

Target

bf141681459bfce54c1eca0f9ff739f7e0a28ec95fb49e05cc78ddf7d31dd64a
Size

7.7MB
MD5

34e9ad129f163d8ddd303a5a3312433d
SHA1

30e474f538a7dbd1782618ca69db4c7236a8c08a
SHA256

bf141681459bfce54c1eca0f9ff739f7e0a28ec95fb49e05cc78ddf7d31dd64a
SHA512

983ad7e5c9a70e9d1a21eb70f0371245b97eefde7a6f6279d704792c4fe768bf10410ec79a6b1334bfc5c61d0068f3e9dcc831cb763e2d3f98f1b13045f3a46b
SSDEEP

196608:7nMwMU5vPq1kvCLL3AUXOruSaEebbfTsqszm++AtgUfSkC:lxPq1rLQU+ruSI31sK+kQLC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bf141681459bfce54c1eca0f9ff739f7e0a28ec95fb49e05cc78ddf7d31dd64a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ