23d987000d08ee0d8e10fd3d2186293c2b02ef1ce4841af3ce66997b9e788706

General

Target

23d987000d08ee0d8e10fd3d2186293c2b02ef1ce4841af3ce66997b9e788706
Size

1.4MB
MD5

bf18733bc6f4e76035a992e62c40c359
SHA1

7ddff5a478ed995ebbc95aa828ca3ed0505175fa
SHA256

23d987000d08ee0d8e10fd3d2186293c2b02ef1ce4841af3ce66997b9e788706
SHA512

c4727aee6ad21c4802347a3c3af1df21f56cb9c58ef1cc19cc7e1c3ef54e2c75e290120b9e129e80ba0e022a294ddee719666f31b34cd1df87633a5a27444719
SSDEEP

24576:froJmCGzoCRPwUJC+lN5yJndMU8zcROL8E6COyHuap2adG8M:froszTmu3z5yJdM/TD6COm9Mt8M

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

23d987000d08ee0d8e10fd3d2186293c2b02ef1ce4841af3ce66997b9e788706
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1004KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1020KB - Virtual size: 1019KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 1004KB

UPX1 Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 97KB - Virtual size: 100KB

Headers

File Characteristics

Sections

.text Size: 1020KB - Virtual size: 1019KB

.itext Size: 5KB - Virtual size: 4KB

.data Size: 15KB - Virtual size: 15KB

.bss Size: - Virtual size: 21KB

.idata Size: 13KB - Virtual size: 12KB

.didata Size: 2KB - Virtual size: 1KB

.tls Size: - Virtual size: 64B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 91KB - Virtual size: 91KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

UPX0
Size: - Virtual size: 1004KB

UPX1
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 97KB - Virtual size: 100KB

.text
Size: 1020KB - Virtual size: 1019KB

.itext
Size: 5KB - Virtual size: 4KB

.data
Size: 15KB - Virtual size: 15KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 13KB - Virtual size: 12KB

.didata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 64B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 91KB - Virtual size: 91KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB