76a60efc73b000ff64b7ac9a7079d55b75f42dae16bd4be4d9d8de2dce2a9413 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76a60efc73b000ff64b7ac9a7079d55b75f42dae16bd4be4d9d8de2dce2a9413
Size

150KB
MD5

79f994a06ef9d2bd2a5c7c2ba2ed8981
SHA1

4b7b4e4f816f9a59b30c80c91682e77a8b740d80
SHA256

76a60efc73b000ff64b7ac9a7079d55b75f42dae16bd4be4d9d8de2dce2a9413
SHA512

7172592f044ded639220eac50b06be77e8c0c4e3ca5dab67179014b43eb703adc3939d73b0cab07cf2ab52974e8a3c51ace5c15945f82560a542e1d16ec36fc7
SSDEEP

3072:6sU4WCXnWRMbUq2mn9H2aAo6mS0RvpcX2oKQ9SyY2LATT:6r4TXkSIy9EYvRv6dY2Lo

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

76a60efc73b000ff64b7ac9a7079d55b75f42dae16bd4be4d9d8de2dce2a9413
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 357B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ