6b790c2fea844b8e9c90f0547770bcdefc4e608c1836c243a2c7af0a9d8b03ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b790c2fea844b8e9c90f0547770bcdefc4e608c1836c243a2c7af0a9d8b03ea
Size

50KB
MD5

401fee904513ab11a99dc201897ccc00
SHA1

00b6c648b4def4da78d9bb0ffa70259afb286966
SHA256

6b790c2fea844b8e9c90f0547770bcdefc4e608c1836c243a2c7af0a9d8b03ea
SHA512

b6f2bf84b5b28ff1b4388e3ac9af21dc130304e7824094809eb21acf144e18baafb6f6dc4aa66eed30a986a710d05fc5a842bd7cab5f3dbcd82167acb6509471
SSDEEP

1536:sya6E9NVuotBHJ2p3QU0vztJpR+QhQa6xS:oNlEp3Q9HD56xS

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6b790c2fea844b8e9c90f0547770bcdefc4e608c1836c243a2c7af0a9d8b03ea
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 4B - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata2
Size: 3B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE