6152c4adc3cac1b8825d725aa486896282469da05ac15bd27756ef537b89b955 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6152c4adc3cac1b8825d725aa486896282469da05ac15bd27756ef537b89b955
Size

461KB
MD5

104b6e3bad79aa11156b4a6c12fa5f62
SHA1

0881c6704fcda2a182f6b65682e3587468cd9d00
SHA256

6152c4adc3cac1b8825d725aa486896282469da05ac15bd27756ef537b89b955
SHA512

89b7cc64ff16cd513d25e7d32928ec2d1fb672232bb0f846997b8da96d06e1290f41f4d08cccb5eb4e851ab6e910f8d0ff9eb0424e928c7782a031b4c122db4c
SSDEEP

12288:gBE1jxzeZtUs082s1uRuu5pxVhvN+PcGds7CBeQS6:g29hgk8teuCDg0Gd5Z1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

6152c4adc3cac1b8825d725aa486896282469da05ac15bd27756ef537b89b955
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 552KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 280KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE