f63f427c333485db8fda01f7ee440a598ad5dbdb3d46348a33957d9f6edba280 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f63f427c333485db8fda01f7ee440a598ad5dbdb3d46348a33957d9f6edba280
Size

1020KB
MD5

74d96f742c3351da0c24b10894dfd292
SHA1

3f3e9b3b4bc89e8e3b7f323b8cf4370ef7bdbc2b
SHA256

f63f427c333485db8fda01f7ee440a598ad5dbdb3d46348a33957d9f6edba280
SHA512

dfc1cf58a5f6cf56782ad008df3c402d30f7b310c5441d7d27c438f6d178da03496d3ba69e4c936629c536d6e048c71a765d744c136ed58c32445acf261fa65b
SSDEEP

24576:KwtNZoam4N2QGL5vROAzrNDF/hhpfXRwE+FLZwBEa2LtuHow:KQNYsfGL5vMAzrNDF/hhpfXR/+NL9wIw

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f63f427c333485db8fda01f7ee440a598ad5dbdb3d46348a33957d9f6edba280
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PX1
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ