519b1f599a2b2484af48f1f7b9ed5bc88e055525d99ccfc355a74486ba843eef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

519b1f599a2b2484af48f1f7b9ed5bc88e055525d99ccfc355a74486ba843eef
Size

116KB
MD5

43d248dc36d4594e60646e0a04f08b6a
SHA1

8daf61464c7077a072db36b9d4bf3bfe93afd097
SHA256

519b1f599a2b2484af48f1f7b9ed5bc88e055525d99ccfc355a74486ba843eef
SHA512

17b480025c13853f7ff5acc023d864cae0187ef329428703532f70ad12ad19b4f0a16ebd1cbb0c4625c7eb1f20f35cf091c5d883a126063268bea0516279e9f2
SSDEEP

3072:Wx0hG8CccaJliMA+J3th4mtT8pvf2rt1rwIuN:WJ9aJ7rUaT8pv8r

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

519b1f599a2b2484af48f1f7b9ed5bc88e055525d99ccfc355a74486ba843eef
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ