16ee75d8e255b04add5f21caf700827eff9456316920a8a4cc3888f39dcb97a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16ee75d8e255b04add5f21caf700827eff9456316920a8a4cc3888f39dcb97a3
Size

116KB
MD5

70df13e85bb3309d128974e061dcf360
SHA1

bcec6ebb5f0b2ce04c587177c9bb1645576ed922
SHA256

16ee75d8e255b04add5f21caf700827eff9456316920a8a4cc3888f39dcb97a3
SHA512

d8b5d67a1a6fd0edd2d7b32dd58cfee7c768b5b3f71bcf9aeceb06ff8d2f6bd50cf244265a1cfff47d6ba5fa0d3639cf132da57f95b35d1372e39366e3bd01b2
SSDEEP

3072:pndtEPjUnBzL1zGCeTSgE372vS/5w+0xf:l3+jyB/Vx/3C6nW

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

16ee75d8e255b04add5f21caf700827eff9456316920a8a4cc3888f39dcb97a3
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 340KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ