b1db90540772969a27b62d15f234cb5aeb916fd9033cc1e371e6b3c752c4006f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1db90540772969a27b62d15f234cb5aeb916fd9033cc1e371e6b3c752c4006f
Size

22KB
MD5

65a19cfa14bb1e3010e2a391275e1bd5
SHA1

0dd30e4b67ef35235b2d379c42bcd6aef5a77157
SHA256

b1db90540772969a27b62d15f234cb5aeb916fd9033cc1e371e6b3c752c4006f
SHA512

7e870306caa8c6c0be053452f728c00f07d5673f68be9e40d5b359d2e03131adaa6e7f73659964acacf80ceb0b9970ac4de0b2a644b77dd64e20e1cb958d32ae
SSDEEP

384:3EtOfGiLwIyYBMihAiiP+LJfCP4BK5thTRcs6iHQdZ+s+:0tOfG6/yYBMihAHPU5CP5jRcMwdZ+s

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b1db90540772969a27b62d15f234cb5aeb916fd9033cc1e371e6b3c752c4006f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ