d7ed0e3c31284493966c825f03e3bb676340295e834a440252683f7f2c8ae0f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7ed0e3c31284493966c825f03e3bb676340295e834a440252683f7f2c8ae0f5
Size

30KB
MD5

7108dc850bdea01f070b415cfcbe9bfb
SHA1

caaeb4f3c918ca568205bb9453575d4ff24e4a34
SHA256

d7ed0e3c31284493966c825f03e3bb676340295e834a440252683f7f2c8ae0f5
SHA512

2c561c36af7b50f7d2f3548b6bd305e9c91f51abe456ae4cf3eca1219f581b3847b626aea8ecacc80a3829f7d6a1aa599f32f59dd12a12ee638f4739c3b4623c
SSDEEP

768:qEqLHI+Ypa31OVFRYdvu60JeEPON1JkN9w9C:sI+0aFOjR8WXJvPcrkjIC

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

d7ed0e3c31284493966c825f03e3bb676340295e834a440252683f7f2c8ae0f5
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ