dce60e7dcb906690bb3b7b5518b2a0aa0662c74fb4e183d064d29e0bc04c4032 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dce60e7dcb906690bb3b7b5518b2a0aa0662c74fb4e183d064d29e0bc04c4032
Size

107KB
MD5

a0030bbf523cecd01169d8a1730fed40
SHA1

e71e48416ae9df92f714545b3118436f8e90f422
SHA256

dce60e7dcb906690bb3b7b5518b2a0aa0662c74fb4e183d064d29e0bc04c4032
SHA512

f3c28013ba2ef4352a99601a521b573b4b7137a1b733bd0dd29413fb357ddc05ba837fd47290eb63a0e734b5e224602196670d530e5eab143bec0c3324cc16d8
SSDEEP

1536:ivexs6lQ9DWOFEHsKCpR68ufvu6VyNyUrSwA2gktwPPIA2xZmY2ssRX3r4wM:kclQ9DWOKMKCKuOqJ9AYwPPkZYZ3r4wM

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

dce60e7dcb906690bb3b7b5518b2a0aa0662c74fb4e183d064d29e0bc04c4032
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ