803b70e6dcc0ba2ffe5ceb20ce8b05c148e6cf106646b9368bb7f99622c7f1ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

803b70e6dcc0ba2ffe5ceb20ce8b05c148e6cf106646b9368bb7f99622c7f1ad
Size

79KB
MD5

4cb9a47900a886459c162e39412e84aa
SHA1

a57562f968c1ea8ce057cebbe0e30eea15222c61
SHA256

803b70e6dcc0ba2ffe5ceb20ce8b05c148e6cf106646b9368bb7f99622c7f1ad
SHA512

0feb767c48f3e6493ab91b5a1df6b133f2047d06db271c160b133b54c10ab4836e03b3ebe513a7f6a79105a59c9a4c267f897356915cc7ad9961d724b692783a
SSDEEP

1536:PG62/nc966jxHzavNUZJGwW+9B6AZQE9j3Oh733elRx:PP2/c7xHzWNKs1+j3QE9j6CRx

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

803b70e6dcc0ba2ffe5ceb20ce8b05c148e6cf106646b9368bb7f99622c7f1ad
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ