fdbf52916ffebc175d3389698516472d4e3d6521f74e7ae4668fd89fb0fe97ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdbf52916ffebc175d3389698516472d4e3d6521f74e7ae4668fd89fb0fe97ba
Size

16KB
MD5

755f094962040b0a6d33da0f5addf6c0
SHA1

1fef175757f1c06bb2754fa239b1b975b7df961b
SHA256

fdbf52916ffebc175d3389698516472d4e3d6521f74e7ae4668fd89fb0fe97ba
SHA512

eea245f1176e9d37169fda29c2ccca43db832adb8545ea0a1e6e05bb6fac939a04ca0b0f5b62bfdfa7b0c3ff0ce84c983a87291219d0fbc939c92d3e28326bdc
SSDEEP

192:znAAGKRWgCdT3QbBfIQGptILWn1kKagOKgBMxlgJrcSt9NL5moMJNCKJRgEJt56F:DHPh4MbsptIL2fagOngKJQakoMWOvyT

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fdbf52916ffebc175d3389698516472d4e3d6521f74e7ae4668fd89fb0fe97ba
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE