70befac14597021f8a4f84261ee54a7ecabfcba58faac59295eae3231f295a29 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70befac14597021f8a4f84261ee54a7ecabfcba58faac59295eae3231f295a29
Size

105KB
MD5

a18f455e0e404d64bbd1ae4383280f41
SHA1

0b8e401856d12a1672d8d05dd64cf0a576330b8d
SHA256

70befac14597021f8a4f84261ee54a7ecabfcba58faac59295eae3231f295a29
SHA512

2e5ade8ffc24a171c4ad019049c4b5f80bf1a8977fa2cbd18eabb29a1d6b007e1542cc2c8febb93db23dd0120148c68a8fd5f43418fe1242f014680d0118612d
SSDEEP

1536:yfwL/519eQ3jj6EUynv1sjc8evugCoaIVYLPKfPFwBQqSNrhyMyUGT+1pMYX3/E5:Dr9nNHvAwfNV0PRJSryMyU4YXPEJ7

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

70befac14597021f8a4f84261ee54a7ecabfcba58faac59295eae3231f295a29
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE