b1e64ef678c712f978efe73e3a233e73cb60d0fbeabcdd24ff3364fb2ad72536 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1e64ef678c712f978efe73e3a233e73cb60d0fbeabcdd24ff3364fb2ad72536
Size

270KB
MD5

c11437f41e83bfabdcf9cd94e884d022
SHA1

d5f27b10ccdacf2d36e43eeee3d895d5e8db8a01
SHA256

b1e64ef678c712f978efe73e3a233e73cb60d0fbeabcdd24ff3364fb2ad72536
SHA512

151392370a2cd3a95e37e8de8d3faea5861ca5fdbff3bbae921dd12265affb045733d1ac91225e9114bba93daaccb1216ee8a35cf5a48e06f846f01364fbb463
SSDEEP

6144:3chQ+k0IQCRue6oOkihqE1r0hd373G+tVdb1Mcp3yaz11ZL:3ch3k0twp+l6d3bBVz3VD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

b1e64ef678c712f978efe73e3a233e73cb60d0fbeabcdd24ff3364fb2ad72536
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ