26a5a761e1f6f07d16b1542994abb12a9a3dbe8fc1b41198bba06f718f29b74b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a5a761e1f6f07d16b1542994abb12a9a3dbe8fc1b41198bba06f718f29b74b
Size

192KB
MD5

7b3b5b3d2fe182fb048d73d9f94b81fd
SHA1

82a3b5053b353adcd144aa2e37402cf976379708
SHA256

26a5a761e1f6f07d16b1542994abb12a9a3dbe8fc1b41198bba06f718f29b74b
SHA512

3768ac38653e9034ff93fdaba11cdb55ad9a63ec21b10e850603073b6b1c18f1d4fb57b62e392d3ff224fc59c9eb15071379f0fb25561ccb29414964fda6f0b7
SSDEEP

3072:gkPgERTkLJl5FEJtB0rL7Eg7/6D6Ab0e4+Je9DCMXicc+HBF5dbzrtOkX0tuWFCi:34ERTkTEJtB0rfEg7CCe2Fc+HXntOptU

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

26a5a761e1f6f07d16b1542994abb12a9a3dbe8fc1b41198bba06f718f29b74b
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 416KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 176KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 440KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ