db6e438b46e8eafbb088b263ef8ee233ad37f3435e929b225209e2c98050634e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db6e438b46e8eafbb088b263ef8ee233ad37f3435e929b225209e2c98050634e
Size

100KB
MD5

6455a954361e5c87388d0057bd842102
SHA1

6caf70d40d1fcd4a3249d43a5099fe3e4b5eecb1
SHA256

db6e438b46e8eafbb088b263ef8ee233ad37f3435e929b225209e2c98050634e
SHA512

606dd9a53f36aaf64f361621dc06fc4be86b0b33a099b2e0cfe70ac7ce337140b3b371fbf153c7fbce2af2d5846e2eb52bdc8ee2b71b2e8b850347fca91ba87e
SSDEEP

1536:u+FCRFMyYVVScFUTYw86nRt62aYYX3VYuG30SkuzIVa/ikTJlO7JJylDdc:u+FmMyW0CUh8cI2a/HeuVJyq4T+7JIdc

Score

10^/10

upx

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/out.upx	Nirsoft

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

db6e438b46e8eafbb088b263ef8ee233ad37f3435e929b225209e2c98050634e
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ