21a6d62a851bfe463f1749dbeb02053a4c5b7bd63cfcb1c93d3ec8e2161dcfea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21a6d62a851bfe463f1749dbeb02053a4c5b7bd63cfcb1c93d3ec8e2161dcfea
Size

55KB
MD5

ac7a568dc6386dcfc9690c7c0f9a0361
SHA1

66b1637a241879e48a6a2daa61e628d5b4f32d77
SHA256

21a6d62a851bfe463f1749dbeb02053a4c5b7bd63cfcb1c93d3ec8e2161dcfea
SHA512

51acdaa7faa3028aa5734c146c9e3e58c2cbd8267bff85164e866216c2a5e0bad0550f2457ec9c05c35b21f8036182828c288b509dc1dfcdd424109e614504a2
SSDEEP

768:/CqGmRZhmVpEElAm1wpWFIDRe6TNeta4NXUUp:/CqGemVaQ0deeho

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

21a6d62a851bfe463f1749dbeb02053a4c5b7bd63cfcb1c93d3ec8e2161dcfea
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ