28f131c512f888c745faf47ab8d6227cb3e55a5a7158fc3afa98eb0bfa9065b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28f131c512f888c745faf47ab8d6227cb3e55a5a7158fc3afa98eb0bfa9065b1
Size

75KB
MD5

314fa436a1d531933ace2fdf1e047942
SHA1

3622d2c790e13ad988157074b3b657dffb7c7e08
SHA256

28f131c512f888c745faf47ab8d6227cb3e55a5a7158fc3afa98eb0bfa9065b1
SHA512

b011872a976b23feff3d839f18448dd2f1622a4e739186c0b57d575720101de63782577e80073b47930c6a58b352b4361a5af6b8eb9cc92c6737779c46226383
SSDEEP

1536:0zbx6ZlBHiZMwPTQKpN2E0W5WhF0guQbzJPGN1KtaXGmyrfF/cF7ZpwQ:qEZlBHoMwPTQ+dD5mF0rzxyO7f

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

28f131c512f888c745faf47ab8d6227cb3e55a5a7158fc3afa98eb0bfa9065b1
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ