18378218d460b1c5b76e1a730ee681fae9484417a5fd8aecd6d1bf9349abdcef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18378218d460b1c5b76e1a730ee681fae9484417a5fd8aecd6d1bf9349abdcef
Size

87KB
MD5

66e99a208d7b38a5dcd3093522752e3e
SHA1

393f57f4277d73fd4ce2c68c4fd82a802737d34e
SHA256

18378218d460b1c5b76e1a730ee681fae9484417a5fd8aecd6d1bf9349abdcef
SHA512

9e976faf428472593cd9326df735e1f6d7e5d9b04ac38e9b1a4bb2e5c521eade4ad312f3517d33814f190bffda7f545e177cbdaf40082e42c8c2c6262c354acd
SSDEEP

1536:cNLcSvAR4wr8TUXEJ4arvpiMkivKD+YmMJ9lyH0kO9Bk5FBDF:cNISIR4wpEJbpfkiC6YfMH0L9SBh

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

18378218d460b1c5b76e1a730ee681fae9484417a5fd8aecd6d1bf9349abdcef
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ