c59c1167c09915d281006eafafc916085a8370fb87bc4ae5a5a5680a03e5e1fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c59c1167c09915d281006eafafc916085a8370fb87bc4ae5a5a5680a03e5e1fb
Size

164KB
MD5

6e11d6854bb8830eab9b4c29dd2d7681
SHA1

a40639aef8fd880d11440c09d8aa54551cb93378
SHA256

c59c1167c09915d281006eafafc916085a8370fb87bc4ae5a5a5680a03e5e1fb
SHA512

41fa6d653001c9c33201ecb710fca7f8a24b6d7cc632e8bf4ec5508b0fd64c7fa54d5b8bdfc567342a9c3b09c4dab247c1f33ec9596440bf791acc8adcc0b932
SSDEEP

3072:BNVJoqk+6oSqdMKY4orvqsb1uyb1wAlFybGDbfATdzO0OW0ZUZYThW0sFj1K5R:BNf1Io5yQoTqsZuyZwkocfkzDOZ+4W0p

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

c59c1167c09915d281006eafafc916085a8370fb87bc4ae5a5a5680a03e5e1fb
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ