dbedf7bf1a62f1c63840c8b4620091276c981b6d3d50c27f0285bc66ab090d0d

General

Target

dbedf7bf1a62f1c63840c8b4620091276c981b6d3d50c27f0285bc66ab090d0d
Size

2.1MB
MD5

73f43b29050d89f5eaeafe264ab802fe
SHA1

9eeef81c647f70220b7fc018c58f1e3414cdc48d
SHA256

dbedf7bf1a62f1c63840c8b4620091276c981b6d3d50c27f0285bc66ab090d0d
SHA512

0b3721208f11003998c51db420ff05bcdbc6484014096c2bc884227b3889fcfd8136dce0d44a9d24c6077bc19f0c6ec52d72d3a8e96af8ecbfa3cd22b3241076
SSDEEP

24576:nSt/35E6h6Y+x834W90A7OmM8OyP8znmtUs05A5Qm4t2eaIU6eFkQS4T9mC1sOLK:nStvjV3hN7O5Ko3spuJredS4T9RLBun

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

dbedf7bf1a62f1c63840c8b4620091276c981b6d3d50c27f0285bc66ab090d0d
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 72B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 4.0MB

UPX1 Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 110KB - Virtual size: 112KB

Headers

File Characteristics

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.itext Size: 9KB - Virtual size: 8KB

.data Size: 36KB - Virtual size: 36KB

.bss Size: - Virtual size: 21KB

.idata Size: 19KB - Virtual size: 18KB

.tls Size: - Virtual size: 72B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 139KB - Virtual size: 138KB

.rsrc Size: 3.4MB - Virtual size: 3.4MB

UPX0
Size: - Virtual size: 4.0MB

UPX1
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 110KB - Virtual size: 112KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.itext
Size: 9KB - Virtual size: 8KB

.data
Size: 36KB - Virtual size: 36KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 19KB - Virtual size: 18KB

.tls
Size: - Virtual size: 72B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 139KB - Virtual size: 138KB

.rsrc
Size: 3.4MB - Virtual size: 3.4MB