0d4be57f604dd8c55bfdb8e4e31dce701abf483a951af2c25781b954a93d846c | Triage

Sharing

General

Target

0d4be57f604dd8c55bfdb8e4e31dce701abf483a951af2c25781b954a93d846c
Size

41KB
MD5

689bbfe2e39d83b78aa853925049ee59
SHA1

b435998902b05493fe3caa8192b9e07d0cca493e
SHA256

0d4be57f604dd8c55bfdb8e4e31dce701abf483a951af2c25781b954a93d846c
SHA512

770f85502bb442c836849b5d9b759fb6d2a534ca83736ca783bcf09779c1ff2eced58d095c4269541881bdf12d8b9fd27d43c3cdfa79c0dd07e6600352760529
SSDEEP

768:06tXXnEI2vPqxxBCSeg0qizIFhs33dCBTePlQwiMp8DmW+iCmXTCQo:0yXXnEjKxxsng0qiahs3ATUyMcxCmDCQ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0d4be57f604dd8c55bfdb8e4e31dce701abf483a951af2c25781b954a93d846c
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ