15c70b04d686fdaf34d2f2df5ac76986df288bf505dd8f413484cbd8699acacc | Triage

Sharing

General

Target

15c70b04d686fdaf34d2f2df5ac76986df288bf505dd8f413484cbd8699acacc
Size

43KB
MD5

81935c148dd22cdc3c4a43b07dd1f630
SHA1

794e7127574d9f4fa8d2743af9cf39d6dadcbffa
SHA256

15c70b04d686fdaf34d2f2df5ac76986df288bf505dd8f413484cbd8699acacc
SHA512

3942363bfc6df04edc88bd899e9d1eeb243b16415c6c0aa4f9f0f633bb49e81c435f7a53097eb56a418f9e3fad00acdf13e10b25ec4c23d998ad29a95cc1cdcc
SSDEEP

768:xprJMnye6TIYCm/YVB+PtYUU4V9pTJaPF076Gc3dxFWuIdXmXHm:DrJMye6LCTB+PtYUU4VPP7ktrKXmXHm

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

15c70b04d686fdaf34d2f2df5ac76986df288bf505dd8f413484cbd8699acacc
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ