21f25991608223136b3aab085d70c3f536ef10ca369dc114dbe45c7b3a844c6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f25991608223136b3aab085d70c3f536ef10ca369dc114dbe45c7b3a844c6f
Size

69KB
MD5

726cdbeab1d59b0cc42cc99d36c125cb
SHA1

804c64844a52db6a737e207eae2653bdfa576be7
SHA256

21f25991608223136b3aab085d70c3f536ef10ca369dc114dbe45c7b3a844c6f
SHA512

c9a1b19edc0cc16985928a3e4a27fea3083d14c38249dcd9dad607c776cde928aadaceab6d77c1878cec0c887cfaa96e2af7f78d87385d30c0c44ede6ed3249f
SSDEEP

1536:/cDGTHJxWxwPZqDNU2motmMHPEe4icaNJX1:ED6c6iU2mo4MHcecMJX1

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

21f25991608223136b3aab085d70c3f536ef10ca369dc114dbe45c7b3a844c6f
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ