05588a8c847087a064f65a97d33964137a7a8beeadfc5ab79b9f441e2441255a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05588a8c847087a064f65a97d33964137a7a8beeadfc5ab79b9f441e2441255a
Size

40KB
MD5

6b29e6a9af7837ea724e36dae6ebbce9
SHA1

15f780c25e4c21325c17e83720a9736ed092a93d
SHA256

05588a8c847087a064f65a97d33964137a7a8beeadfc5ab79b9f441e2441255a
SHA512

7334f321d83ff5199b24413eec4f86fea6fe7a31d3e2e37854c23f8602fcf3d9efcecbd32ceef9a73593e6eb80cd8db11f1dbf7a1723fc9ebf60d5f07d2397c8
SSDEEP

768:h4VYKdNpA4eKBHPC9acCraMmL2UKQuf2Ouq7kF+oRwF7L:h4VremBHXNrEyUKLuyxMwF7L

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

05588a8c847087a064f65a97d33964137a7a8beeadfc5ab79b9f441e2441255a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ