57776640a87bb853be194ea08432c9416e1ac3f8d5e2db913ec135077584e746 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57776640a87bb853be194ea08432c9416e1ac3f8d5e2db913ec135077584e746
Size

73KB
MD5

6473946efade37d9df567e564f0ad380
SHA1

166bef5cd557c103a1a7c4b36bb0f12d3dd4a6b6
SHA256

57776640a87bb853be194ea08432c9416e1ac3f8d5e2db913ec135077584e746
SHA512

352487a715c321cf2dea3d28a579e639da105432c6ce77cbad07e2a8cdf6d0843b6dd8ee2786ed3e574e821317a61fb5550115d710346580c837411e71295b8e
SSDEEP

1536:AydKWp0ULGMt2LOt3SvHstgI2q3ef+1dkCYN5q323ya:AydWUCBLOBSfFIdhO5n3ya

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

57776640a87bb853be194ea08432c9416e1ac3f8d5e2db913ec135077584e746
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 332KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE