a6ebf61f602f8e5b6b9507ca806b9d10c1e15c801a9b5df58c224b7dcd4a9bd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6ebf61f602f8e5b6b9507ca806b9d10c1e15c801a9b5df58c224b7dcd4a9bd9
Size

625KB
MD5

837311fd1b51f03596eeaac437a41320
SHA1

3a0f5ca4b19b1bfbe2257d49d8ea09fbd5f6ecca
SHA256

a6ebf61f602f8e5b6b9507ca806b9d10c1e15c801a9b5df58c224b7dcd4a9bd9
SHA512

07b9f6fa936984ec021683d9884b6d7eaa639b524046611c14765bde870ee6f917b308ab595a275303b91119ff025323eedeec3917be9ff71263a38764550844
SSDEEP

12288:uxVTV1IPKuxdNK5PqCF/iU0M6vdVi9/JamojfNrie:4z1cTNOSCR0M61VUARj1rf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

a6ebf61f602f8e5b6b9507ca806b9d10c1e15c801a9b5df58c224b7dcd4a9bd9
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 616KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 182KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 442KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ