6e964488f9c4d7c10c422b71d472ee316724b0ceaef3ee9219a72b99f36672ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e964488f9c4d7c10c422b71d472ee316724b0ceaef3ee9219a72b99f36672ec
Size

173KB
MD5

6ac2e260ded7284534bac71f1347f33b
SHA1

287154a2b0de4043c8679007ac28c24ea4f2551c
SHA256

6e964488f9c4d7c10c422b71d472ee316724b0ceaef3ee9219a72b99f36672ec
SHA512

551f19f178a8576036bc663e4ab35f58d72c11ea6e09d9bf88aeab18270c9f3f13e4623714a7b0ef226e421c005424bad4935718294dad16a1c9c63848cddc38
SSDEEP

3072:3wV4OgSzBmh04eZFkz3Rr0gGGj9Tf8MZCA2NMmOuAMhWyluQGWoZg:3MzzILGFkzhr0vGj9oCHmcqWyPT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6e964488f9c4d7c10c422b71d472ee316724b0ceaef3ee9219a72b99f36672ec
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 343B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ