0da5c53c1e482bdf2544b6ee257eaf332611ec16c2a521579083f2bcc3181325 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0da5c53c1e482bdf2544b6ee257eaf332611ec16c2a521579083f2bcc3181325
Size

140KB
MD5

91a406daeda58767d3e2e50ba861d770
SHA1

d30dd6ab5d4b496f0199020ad96d01094c8d80c9
SHA256

0da5c53c1e482bdf2544b6ee257eaf332611ec16c2a521579083f2bcc3181325
SHA512

e592ba55bf345df6bc97653ef064d9c1fca543c19fb590c1e0bc300d7fdcef2c18dc3e7b22a071925001b63836458b636cc1c296f22d1bbc7f1ec547d11ed66e
SSDEEP

3072:RvUCxjPUeTgud0ZUs1AHFoxe9dfgMhDt:Rc+Ptgud1s15ejf

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

0da5c53c1e482bdf2544b6ee257eaf332611ec16c2a521579083f2bcc3181325
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ