59350e31256db46588e0a64bdf855d87a59be15a93c25694dce32f865d0af2d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59350e31256db46588e0a64bdf855d87a59be15a93c25694dce32f865d0af2d3
Size

272KB
MD5

68f04a99bb86c631d6ce283c87db3afc
SHA1

9a9df10188b8b4e7573f6f8e0b5363ed2c35c854
SHA256

59350e31256db46588e0a64bdf855d87a59be15a93c25694dce32f865d0af2d3
SHA512

9a77d8bd8a02f044227f4793330051666b7e3de40cec2b0d476ee864644ad20664996d3b288f20a02b0a411fe34f41d9d0e74127555e5f6017bad68704379827
SSDEEP

6144:LD6C8m5ceITWT+1lztFWBhqyxCEeD5k+BJ1Lgv2WsTa/d9FbD2:LD9FHbTqhr9m6m+BWSTaV9k

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

59350e31256db46588e0a64bdf855d87a59be15a93c25694dce32f865d0af2d3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ