14b8e3cbab985a8002d3858a93314350183f69d7ec0c9e6bff9cf19e6a749bfb | Triage

Sharing

General

Target

14b8e3cbab985a8002d3858a93314350183f69d7ec0c9e6bff9cf19e6a749bfb
Size

501KB
MD5

74abebb1e2454162f6c63519ecd062f0
SHA1

7c411f316c1b705df18b2e6925bfef19947d49ce
SHA256

14b8e3cbab985a8002d3858a93314350183f69d7ec0c9e6bff9cf19e6a749bfb
SHA512

036e78af73abad2faa42aeb2776114a0672aa57e29f520d50b694c3549fdade3563caea0c2b8ed8542885bd673808ca7331461965b6b90fcfe77e6e6e8555e85
SSDEEP

3072:0dQeL803vmdjwxbycIqHnCvCrD9VA5DB89xpnmkfpV8:0aW80/ejwx8onRjJpV

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

14b8e3cbab985a8002d3858a93314350183f69d7ec0c9e6bff9cf19e6a749bfb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 664KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 385KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ