00b5bb97ffff13eaa766d94938adc355b246e5b027173f98b8ff84033bb71977 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b5bb97ffff13eaa766d94938adc355b246e5b027173f98b8ff84033bb71977
Size

4.1MB
MD5

4057f134fb989e3cb911abba26e5b772
SHA1

0dfb31c31c52bdd9e069de0501de15eb4630ef54
SHA256

00b5bb97ffff13eaa766d94938adc355b246e5b027173f98b8ff84033bb71977
SHA512

3ac1555bfe08adc4d0caf239dfc70bccf78be6cc1501e184e4aa2b6afb2f0f29b09a52997567432d5d111065a5f32a78ef6294bda17f7b33c5baf615196a7769
SSDEEP

98304:lS/WKuwbbVUrnVBtaeQQ716f5Tm8XgWPcKSkAD/c:lS//PVUjVBtn0f5TNQWUKSVc

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

00b5bb97ffff13eaa766d94938adc355b246e5b027173f98b8ff84033bb71977
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 872KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ