fe535f702940c6874741a3471ea9422fe586355e11205ad80c862dbe6fd3d550 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe535f702940c6874741a3471ea9422fe586355e11205ad80c862dbe6fd3d550
Size

573KB
MD5

6a7c8ce4efdee567af87ecc7c63449b0
SHA1

4dd6e3aca7c3bf98f6a2828f96c6408f77525abf
SHA256

fe535f702940c6874741a3471ea9422fe586355e11205ad80c862dbe6fd3d550
SHA512

127a1f5c386bdf9eb96e8517767e69795bd2773c391ed6a89faa21537fcbda3325017040975e1f90ed5787cec81cccbaa1c30a7e88ce5693d6381fef27bf3223
SSDEEP

12288:ohRwctdaumW9fkQngna8YMmlUbzDCFC2PQKoSlymP4V:oh6cX/ZWa+nD0PQBo

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fe535f702940c6874741a3471ea9422fe586355e11205ad80c862dbe6fd3d550
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

`/�
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE