201524daaab443590e3cb446a1fe24e14ab91dc9d31e49c6c3f9a599966a8cda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

201524daaab443590e3cb446a1fe24e14ab91dc9d31e49c6c3f9a599966a8cda
Size

78KB
MD5

6bac7a10bd6e8016e9b14f7aafb142d0
SHA1

275f03e1251d6c80023adde16503a1ca005931a6
SHA256

201524daaab443590e3cb446a1fe24e14ab91dc9d31e49c6c3f9a599966a8cda
SHA512

ebe4191afb4e03ab90dbbcd996545666824b7680a1b59734c5ad13c02624ca3a7ff603677d236e940b40c77a69ae47accbf09c3a5f3dd6fc271aca64d6799d3f
SSDEEP

1536:4rkeBJCKpY1nd7I9LLYmfMjPnmgszjqfJMWLACu5DFk2ke:44WJkd6Amkjuvz2RHLAhBR

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

201524daaab443590e3cb446a1fe24e14ab91dc9d31e49c6c3f9a599966a8cda
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ