0b2e1464ec588b9d5e19d19146929dc152655476d261c6cc95d8f0cca2fb8cae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b2e1464ec588b9d5e19d19146929dc152655476d261c6cc95d8f0cca2fb8cae
Size

405KB
MD5

648a5a29dd291ed983e08539721dad80
SHA1

02e49f00632b16fd6c05b12eda89ad2fdf274bf7
SHA256

0b2e1464ec588b9d5e19d19146929dc152655476d261c6cc95d8f0cca2fb8cae
SHA512

41027bd37d67011e0d30252c31898b062a397b743e94e49498f85969493fc55df9bcbd09694c4ef9b2a1b60319a3568904d822580e7a90c076fad47db46216a0
SSDEEP

12288:2Un6VxSSqzd+p1whDmDay3NIvJW+sqNGs:wxydBhDruUW+sqAs

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0b2e1464ec588b9d5e19d19146929dc152655476d261c6cc95d8f0cca2fb8cae
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 632KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 386KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 619KB - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ