7dee170a65c973aa34bf2e5c34d28b613994053dbd34cd020a4b68389022c137 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7dee170a65c973aa34bf2e5c34d28b613994053dbd34cd020a4b68389022c137
Size

42KB
MD5

1f37e4472ea7b0d1513597551c9e9c7c
SHA1

37fa46679383bfb5c90a3407a98957030009b4fb
SHA256

7dee170a65c973aa34bf2e5c34d28b613994053dbd34cd020a4b68389022c137
SHA512

1fa621a711875c63e840f06865aa4e68fa5b927c61a7e287519479044870c4f0e39f343c7cef337f1164440675e46ac0ce481b8e56cee98dd94259cdcfa8f7dc
SSDEEP

768:ELbGJEnMFBz+6JcMtFMRMP4UoEu7kG7kWN4eWRS4op0dKP30CMMG:EmamRlcMMRMP477UWN4emCmikCdG

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

7dee170a65c973aa34bf2e5c34d28b613994053dbd34cd020a4b68389022c137
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ