fe6e3fb1a32c81246b8f76d1aad4314dc0d586e11c8940303b93c87cbf991b95 | Triage

Sharing

General

Target

fe6e3fb1a32c81246b8f76d1aad4314dc0d586e11c8940303b93c87cbf991b95
Size

372KB
MD5

6b6abdcf08794cc6a2696e03f6bf21b0
SHA1

4ef9526a89c6c81404a63f486e1115f06c0169ce
SHA256

fe6e3fb1a32c81246b8f76d1aad4314dc0d586e11c8940303b93c87cbf991b95
SHA512

adef84adf708ab9610dc2409e2f4c6d54accd9dd71621c538d2a6e6684bf5903d48a3c655e49bbe2e9ac3e481999f1a2e648cd3f931dffd1aa600a5050f64387
SSDEEP

6144:zMFhU2TbJnUfEwqOsRTaoZjX54nXQ1tOSTqB9O4Yc+iBzoz2PELbOsD:zsh5JnbOUeolRWBx+aE2PELbXD

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fe6e3fb1a32c81246b8f76d1aad4314dc0d586e11c8940303b93c87cbf991b95
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 656KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 350KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 684KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ