bd041ef7dcefe6d72d048fdc9d8488e25b88b84f3325703dd8f55de57812e4ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd041ef7dcefe6d72d048fdc9d8488e25b88b84f3325703dd8f55de57812e4ed
Size

139KB
MD5

e61d84d80286bafcacb93cf7e205e0ed
SHA1

e2c6f61beef9599db8de094ccb46ced5d3aa5a0f
SHA256

bd041ef7dcefe6d72d048fdc9d8488e25b88b84f3325703dd8f55de57812e4ed
SHA512

4ceba81eb23122f678cb0c77b6b87cefff366812477dab42671c4ebccef632c4087299d2b056c2c7a334fa84b3240554455b3e451ba143c84bd36a4f437af274
SSDEEP

3072:SwzbCYMaEMBgDwrQhkAaPuJDhjawpyip0T7Ku/VxE1qF9hl7GXw:DC1XzeAaPqdawIq0T7zTR9

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

bd041ef7dcefe6d72d048fdc9d8488e25b88b84f3325703dd8f55de57812e4ed
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ