65231b8fe5c0550190a72313ad081cbf19133c07245fb85f120e47c498e7c985 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65231b8fe5c0550190a72313ad081cbf19133c07245fb85f120e47c498e7c985
Size

653KB
MD5

7c28818b4ca8fa095ac55e9767a053fc
SHA1

4e371b9edac762c06c0d3aa052f365f53337c501
SHA256

65231b8fe5c0550190a72313ad081cbf19133c07245fb85f120e47c498e7c985
SHA512

9994440da95dc7b5fa166ca4b245ac06ffe7ba217fd05db88fbddee752517d41388d4e737a6beed0561678332e4ede693a9e78b42252260c4ebd93a9e021b689
SSDEEP

12288:bMydORsy5IXEf/9m29jsWBI1US+ZHXQQ2MFiMIYkk22kBkmMkkEkkCfs6k05kqiK:xOf9P6H0HlFiMIYTJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

65231b8fe5c0550190a72313ad081cbf19133c07245fb85f120e47c498e7c985
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 848KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 302KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 350KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 776KB - Virtual size: 775KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 352KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ