16b9a9d142fb951f25759a870b6bddbbe6e9e6b4249a17d0db498b21f6a195d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16b9a9d142fb951f25759a870b6bddbbe6e9e6b4249a17d0db498b21f6a195d1
Size

40KB
MD5

545abdd501e46ee3ebe48c5479d7bbed
SHA1

de1f0d2a67c664b766291eb8b71fb22380931fde
SHA256

16b9a9d142fb951f25759a870b6bddbbe6e9e6b4249a17d0db498b21f6a195d1
SHA512

8eae932071fe2e4a1ee6bf2f213e1d12c801f0b880f4343b38e3bf7895e2e58c001407d86256b4a661cff4981eaea09efa88bde246892637ff4b9ba7d871fc0a
SSDEEP

768:h+RdYV2fPQULPKmN6Eyj56OiCW969wFwGrE+7t813cYVk89IXtFZbqM1oqLZ+pQu:h+RO2fPQGTNXOiCWL7q5VfI3tZ1tgpQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

16b9a9d142fb951f25759a870b6bddbbe6e9e6b4249a17d0db498b21f6a195d1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ