c631b5966aa8b386bff4c92c0e7b3879822b59547fbfd396dae404977ed298d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c631b5966aa8b386bff4c92c0e7b3879822b59547fbfd396dae404977ed298d8
Size

13KB
MD5

25467cd96adaaab61e8a1df228a8ab0a
SHA1

0e0bde723c05653e9cd04432c15be0880deb5301
SHA256

c631b5966aa8b386bff4c92c0e7b3879822b59547fbfd396dae404977ed298d8
SHA512

a8ee57875f018dff25bd2b11942cca4894d5fbb18fde4a8c4a2a45257198c5b5eb9bc222ac29bfa1e5e16dfb35c0d55838fc4e21743a881031e79bac1056d6dd
SSDEEP

192:0/Frrki47Y8qyTr2vwmrnZ+1yu89tN0qyYZaldKatEXraEcmb2lcU4GZF:c6VFrTrKvZbXtufYUPVE/jb2j4gF

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c631b5966aa8b386bff4c92c0e7b3879822b59547fbfd396dae404977ed298d8
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE